Author

Topic: Operating System Advice For Safety [Qubes OS] (Read 129 times)

newbie
Activity: 118
Merit: 0
You can use MEW with Firefox/Chrome etc in a safety workplace qube and ordinary web surf side by side. Keyloggers malwares and other harmful stuff never reaches your safety qube.

Long term Qubes user here.

This isn't universally true. Qubes certainly provides a different standard of sandboxing, but is not necessarily absolute security. You need to use a CPU with virtualisation instructions (especially IOMMU instructions) to get the highest standard of compartmentalisation, but even Qubes has had it's critical bugs over the years (although to be fair, the serious problems were upstream issues with the Xen hypervisor, not with Qubes itself).

So it pays to be aware that Qubes still depends on the integrity of it's hypervisor for it's security. However good that is, it's not infallible. Make your decisions (especially concerning your BTC) with that in mind. e.g. I still use a separate offline machine for my private keys, I consider Qubes and an offline tx signing machine to be a complete system, not just Qubes on it's own.

Really appreciated with your constructive comment. Hope to see Qubes OS will over come that all issues. For now, I'm gonna go same way with you, an offline machine side of my operational one. Cheaper than loosing my funds  Cheesy


Addition to general safe precautions we should use our PC's as safely. That topic is far away than cold storing.

If you need maximum anonymity and security, then use OS Tails on your USB storage and "Linken Sphere" browser

For anonymity Tail OS is awesome but for safety I'm not sure as well. Tried it several times however for daily use Tails some boring  Lips sealed
hero member
Activity: 770
Merit: 501
Addition to general safe precautions we should use our PC's as safely. That topic is far away than cold storing.

If you need maximum anonymity and security, then use OS Tails on your USB storage and "Linken Sphere" browser
legendary
Activity: 3430
Merit: 3074
You can use MEW with Firefox/Chrome etc in a safety workplace qube and ordinary web surf side by side. Keyloggers malwares and other harmful stuff never reaches your safety qube.

Long term Qubes user here.

This isn't universally true. Qubes certainly provides a different standard of sandboxing, but is not necessarily absolute security. You need to use a CPU with virtualisation instructions (especially IOMMU instructions) to get the highest standard of compartmentalisation, but even Qubes has had it's critical bugs over the years (although to be fair, the serious problems were upstream issues with the Xen hypervisor, not with Qubes itself).

So it pays to be aware that Qubes still depends on the integrity of it's hypervisor for it's security. However good that is, it's not infallible. Make your decisions (especially concerning your BTC) with that in mind. e.g. I still use a separate offline machine for my private keys, I consider Qubes and an offline tx signing machine to be a complete system, not just Qubes on it's own.
newbie
Activity: 118
Merit: 0
Hello dears,

Addition to general safe precautions we should use our PC's as safely. That topic is far away than cold storing.

As you know statistically Windows > OSX/Linux in use all over the world. Then as a natural result infections and viruses for Windows is very high even no need to compare. I generally advise my friends to use Linux distrubitions for vital and critical workplace. Why? Cause Linux systems are safer than other two ones even than OSX.

And my main reason to open that new topic is, showing you more and more safe operating system in even Linux distrubitions. Qubes OS

How differs than other OS?

You may know Virtual Machines and Sandbox environments for safe launch of programs as isolated area. Qubes OS's name comes from that evironments "qubes" where isolated from each others. Giving example:

You can use MEW with Firefox/Chrome etc in a safety workplace qube and ordinary web surf side by side. Keyloggers malwares and other harmful stuff never reaches your safety qube.

For banking process you can apply ultimate safety zone with qube that never be affected other workplace.

Qubes OS is based on Fedora and compatible with Debian/Windows for virtual machine environment. That means you can use all those ones' applications in qubes as safely by your wishes.

I'm new in Qubes OS too so exploring it myself Smiley. I do not mention all details here you may look up docs of it and Google. I think you gonna like it just like me by the time of progress. I want to see other experienced users who already used or still using Qubes OS what under that topic comments. Please share with us your thoughts.

*Qubes OS can not save you cause of personal faults like sharing private key/master key on anywhere via Internet network. So QOS against to viruses/malwares
Jump to: