2 ms·
QubesOS had the right idea. You want layers and layers of security, with multiple VMs at the root.
by Gigachad 6mo ago
QubesOS had the right idea. You want layers and layers of security, with multiple VMs at the root.
- halfcat 6mo ago> had the right idea Is it no longer the right idea?
- Gigachad 6mo agoI mean that in the sense that they had the idea way before the wave of rapid linux 0days and supply chain attacks were common. The design they picked has only become more relevant.
- 7373737373 6mo agoSee also: https://genode.org/ https://genode.org/ Also, in addition to isolation and https://en.wikipedia.org/wiki/Capability-based_security https://en.wikipedia.org/wiki/Capability-based_security between processes, capability security within processes, see languages like E (https://web.archive.org/web/20260506035108/https://erights.org/ https://web.archive.org/web/20260506035108/https://erights.o...) or Monte (https://monte.readthedocs.io/en/latest/index.html https://monte.readthedocs.io/en/latest/index.html)