3 ms·
> More generally, there's compartmentalization. Not just multiple email addresses, but multiple VMs, connecting through different VPNs, and/or Tor instances. Mo
by cartoonworld 7y ago
> More generally, there's compartmentalization. Not just multiple email addresses, but multiple VMs, connecting through different VPNs, and/or Tor instances. Modern machines can run several Linux VMs, and switching among them is as easy as switching among app windows.
Shout out to https://www.qubes-os.org/ https://www.qubes-os.org/ Qubes OS, an Open Source research implementation of this concept on the OS level. BYO OPSEC.
- mirimir 7y agoYeah, love Qubes too. The learning curve for that is steeper than for VirtualBox, however. As is, with absolutely no doubt, the security level. In that it uses a hardened version of the Xen hypervisor. That also means tighter hardware requirements, however.
- cartoonworld 7y agoI agree fully. I would be really interested in generalizing their security model amongst more (probably inadequate) hardware. We can dream :)
- mirimir 7y agoSome years ago, after reading beta-level posts about Qubes, I implemented as best I could in VirtualBox. I used pfSense VMs as VPN gateways, and Linux VMs for workspace. While I was at it, I used multiple pfSense VMs to create nested VPN chains. Sort of like Tor circuits, but static (so much less anonymous) but also much faster. Then Whonix came along. And it works very well with nested VPN chains.