4 ms·
> Qubes OS starts from the position that all VMs are or soon will be compromised. Zero-trust in network design assumes the bad guys already have the whole netwo
by warkdarrior 2y ago
> Qubes OS starts from the position that all VMs are or soon will be compromised. Zero-trust in network design assumes the bad guys already have the whole network.
So what does Qubes OS do to protect against a hypervisor bug? Those must exist.
How do you ensure that your systems are still working and retrieving data from databases, etc, when bad guys have the whole network and can block all communications?
- nonrandomstring 2y agoThe answer to both those questions is you can't. So you you either need to make other provisions at different levels of the stack or design your architecture to make them irrelevant to your security model.