I am aware of the side channel attacks (https://www.qubes-os.org/doc/data-leaks/#types-of-data-leaks https://www.qubes-os.org/doc/data-leaks/#types-of-data-leak

I am aware of the side channel attacks (https://www.qubes-os.org/doc/data-leaks/#types-of-data-leaks https://www.qubes-os.org/doc/data-leaks/#types-of-data-leaks) and of serious vulnerabilities in handling PCI devices. I don't see how it would affect disposable VMs running untrusted code. See also my answer to the sibling. > and asserting there are no bugs left seems incautious I don't exactly assert there are no bugs. I do assert that escalation to the host is very unlikely, since I've never seen one after Blue Pill: https://en.wikipedia.org/wiki/Blue_Pill_(software) https://en.wikipedia.org/wiki/Blue_Pill_(software) > handling the guest instruction traps on the host side which can actually get quite hairy in corner cases Any examples, where a Disposable VM can make some harm to the host?