4 ms·
>> one side has to find a few bugs, the other side has to make zero mistakes. > This is not how security works. what do you mean? ime this is absolutely how
by hansel_der 5y ago
>> one side has to find a few bugs, the other side has to make zero mistakes.
> This is not how security works.
what do you mean?
ime this is absolutely how security works regardless of your defense strategy.
- fsflover 5y agoHave a look at my link. This is the operating system which does it right: even if you are compromised, the compromised VM* is isolated from the rest of the system and is not trusted to begin with. You don't have to make zero mistakes. *Yes, you do everything in VMs, with a transparent interface.
- bradyd 5y ago> You don't have to make zero mistakes. You do though. You can exploit flaws in the hypervisor to escape the VM and then you've bypassed the Qubes security model. Here's one such example: https://www.qubes-os.org/news/2017/08/15/qsb-32/ https://www.qubes-os.org/news/2017/08/15/qsb-32/
- fsflover 5y agoThis escape is why Qubes switched to hardware virtualization, which was AFAIK last time broken by the Qubes founder in 2003: https://en.wikipedia.org/wiki/Blue_Pill_(software) https://en.wikipedia.org/wiki/Blue_Pill_(software).