3 ms·
> Linux isn't like macOS, it doesn't have any kind of proper desktop sandboxing architecture that really works. As a QubesOS user, I beg to differ. Just becaus
by lrvick 1mo ago
> Linux isn't like macOS, it doesn't have any kind of proper desktop sandboxing architecture that really works.
As a QubesOS user, I beg to differ. Just because most Linux distros are negligent with sandboxing does not mean all of them are.
- veeti 1mo agoFunny because there is a 101 level Qubes RCE on front page right now.
- literalAardvark 1mo agoEh. That happens sometimes, but its design and track record is really good.
- lrvick 1mo agoSigh. Qubes had some great security design and implemented it the only way time/funds would allow: by cobbling together a lot of unfortunately very complex and broken things built for a different security model decades ago. Qubes is the least bad option for laptops (until Stagex Work ships which I am designing) but there is no reasonable server OS. I am ripping off the best ideas from xen/Qubes and starting over with: https://distrust.co/blog/enclaveos.html https://distrust.co/blog/enclaveos.html
- negura 1mo agowhat are you on about? The fact Qubes has to exist proves Linux is insecure. QubesOS is not a Linux distro. It just happens to ship dom0 as a Fedora VM. But it doesn't just support Linux, it also supports Windows and BSDs. None of Qubes security guarantees come from the Linux kernel.
- deleted 1mo ago[deleted]