3 ms·
Qubes is a capabilities based OS, for arbitrarily course grained capabilities. Far better fine grained systems are possible, there just don't seem to be any rea
by mikewarot 1y ago
Qubes is a capabilities based OS, for arbitrarily course grained capabilities. Far better fine grained systems are possible, there just don't seem to be any ready for prime time. Genode and GNU Hurd are about as close as you can get these days. Neither of them requires trusting application code, nor depending on its correctness.
Think of it as using circuit breakers, instead of the current approach (in Linux, MacOS, Windows, etc) of just giving applications access to everything by default, and counting on them to be correct, and non-evil.
- fsflover 1y ago> Neither of them requires trusting application code, nor depending on its correctness. I'm not speaking about trusting the application code. This is obviously not safe. I'm talking about trusting as few lines of code as possible, including the OS itself. In other words, security-critical code should be minimized. For GNU/Linux, it's tens of millions of lines of code. You rely on their correctness. For Qubes it's about 100000: https://www.qubes-os.org/doc/security-critical-code https://www.qubes-os.org/doc/security-critical-code.