Hacker News new | past | comments | ask | show | jobs | submit login

If the apps work together, they typically belong to the same security domain / trust level. Do you have examples when you still have to isolate them from each other?





Even if things are on the same trust level that doesn't mean that if one gets compromised I don't care that it affects the 2nd.

reply


So just run them in different VMs?

Apart from that, any hardening in Fedora can be utilized inside a Fedora VM on Qubes. Qubes doesn't force you to use VMs with no isolation inside.

reply


But then the files can't be shared.

reply


Qubes has such functionality.

reply


And you just deduced why sandboxing as it is implemented today is really pointless for the desktop .

reply


I'm using Qubes as my daily driver on my desktop, so no.

reply


What do you get from it? Specially considering that from above "programs that work together go in the same context"..

reply


What I get from it: https://forum.qubes-os.org/t/whats-your-system-layout-like/8...

Two official examples of how one could benefit from Qubes:

https://www.qubes-os.org/news/2022/10/28/how-to-organize-you...

and

https://blog.invisiblethings.org/2011/03/13/partitioning-my-...

See also: https://forum.qubes-os.org/t/how-to-pitch-qubes-os/4499/15

reply




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: