>Those are strange requirements. A threat model that necessitates an air gap is indeed a strange one, I daresay even ridiculous. To put it frankly, most peopl

>Those are strange requirements. A threat model that necessitates an air gap is indeed a strange one, I daresay even ridiculous. To put it frankly, most people simply will never have to consider such a ridiculous threat model. Being suspicious of everything down to literally the copper wire in your power cord is something most people will rightfully consider ridiculous. For most people, a virtual machine will provide more than ample security for their needs, and it's been mentioned already that Qubes itself is great so nobody is discounting the value there. The problem is we are not talking about normal people. We are talking about highly specific, highly special people handling highly valuable work, dogged by highly powerful hostiles. The very nature of these people and their work is ridiculous, which necessitates considering ridiculous threat models and implementing ridiculous security measures to guard against them. Where someone needs an air gap, replacing that with Qubes is mind bogglingly stupid because to quote karma_pharmer who put it very poignantly[1]: That is not an air gap. [1]: https://news.ycombinator.com/item?id=39951031 https://news.ycombinator.com/item?id=39951031