2 ms·
I do understand air gaping. However I don't understand what you're suggesting to do in practice for The Guardian. Exchange files via QR codes? True air gaping i
by fsflover 3y ago
I do understand air gaping. However I don't understand what you're suggesting to do in practice for The Guardian. Exchange files via QR codes? True air gaping is simply unusable for non-experts. I believe in a reasonable security.
In the article, they explain how they made a real, practical step towards a better security. Perfect is the enemy of the good.
I also like this reply: https://news.ycombinator.com/item?id=39952028 https://news.ycombinator.com/item?id=39952028
- Dalewyn 3y agoMaybe you're not aware, but The Guardian's job description is obtaining and handling sensitive information. They are experts, ostensibly anyway. Their threat model is rightfully ridiculous and ridiculous threat models require ridiculous security measures such as air gapping which Qubes cannot satisfy. Reasonable is not enough given what they do. EDIT: Maybe these guys aren't experts and don't deserve to receive and handle sensitive information: https://news.ycombinator.com/item?id=39954815 https://news.ycombinator.com/item?id=39954815