4 ms·
The fatal flaw with this idea, which I haven't been able to get around, is that you now spend your life entering passwords and doing sensitive work on supremely
by noman-land 3y ago
The fatal flaw with this idea, which I haven't been able to get around, is that you now spend your life entering passwords and doing sensitive work on supremely untrusted hardware.
- ikurei 3y agoI don't think the assumption is you'd be doing that all the time. It's just good that you can do it if needed. If my laptop is stolen, I can just buy any linux-compatible laptop and run this, or I can borrow someone else's if I judge the risk acceptable. From the article: > When I switch from my work computer to my personal computer I just bring the USB stick with me; same thing next time I upgrade a computer.
- dncornholio 3y agoAs long as you decide where you put your USB stick in, this is not a fatal flaw or a flaw at all.
- prmoustache 3y agoDid he say he was using it on untrusted hardware he didn't own? I saw it as something he can run wherever he wants without having to migrate configs and data. Like you are flying in a different country, go to a store, buy a computer, start an hypervisor and you are done. I would still reinstall first that new computer with an OS of my choice, but an extension of his method could be to have that qemu image stored on a liveusb that already has qemu installed. Maybe that is what he does.
- ekianjo 3y ago> I saw it as something he can run wherever he wants without having to migrate configs and data. Much more practical to use syncthing
- prmoustache 3y agoOr not. To achieve the same with syncthing you'd need an aditionnal layer for the config like: git + stow, puppet, ansible, or using a distro like nix. + several GB of data may be moved faster from A to B using sneakernet than internet.