3 ms·
I wonder how long until we end up with multiple physical computers in the same box, I suppose sharing clipboards etc. would be even more of a headache than Qube
by blacksmith_tb 3y ago
I wonder how long until we end up with multiple physical computers in the same box, I suppose sharing clipboards etc. would be even more of a headache than Qubes, but it would hard for one cpu to escape to its neighbors...
- pengaru 3y agoI already wanted exactly this when an early usbarmory prototype landed on my desk @ CoreOS. There was enough room under my thinkpad's palmrest for a couple of them. The main missing link I saw was the need for what's essentially a KVM switch builtin to the laptop, so the keyboard+trackpoint+video could be physically cycled through the host and the little embedded machines.
- blacksmith_tb 3y agoI was imagining something like a KVM switch too, maybe if someone packed an RPi compute module and an RP2040 into a Framework expansion, it could have a button on the side that would 'type' the commands needed to make the switch from host to guest pc (I guess there's a little more plumbing needed though to get access to the laptop hardware - maybe it'd be usable if we just got VNCed into the guest...)
- pengaru 3y agovnc into the guest isn't good enough, if the host's compromised it has the same vnc access you're using, defeats the whole point of all the physical isolation. That was an already supported way of using the usbarmory from the host btw. I'd be ok with a software-controlled KVM from the host to do the switching however. But the guest machines need to be physically routed into the display/keyboard/mouse and physically switched. It's just about physically sharing the input/output hardware in a compact and secure fashion.