bsergay

joined 6 months ago
[–] bsergay 2 points 5 months ago

TIL that Tails predates all the distros mentioned in my earlier comment and it also predates Whonix. So thank you for mentioning that! (It's by about 3 years if anyone is wondering; Tails in 2009; Kicksecure, Qubes OS and Whonix in 2012; secureblue in 2023.)

So, the reason I didn't even mention Tails, is because I (frankly) don't regard it as a daily driver meant for general use. However, I might be completely wrong on this. So please feel free to correct me.

However, even if Tails would be excellent as a daily driver, the problem related to reliance on backports for security updates still persists. Furthermore, while its protection against forensics is arguably superior to anything else out there (including Qubes OS), its overall security model is not something special. Even if -for the sake of argument- we'd regard its security superior over both Kicksecure and secureblue, it still wouldn't make a chance against Qubes OS' security model.

[–] bsergay 9 points 5 months ago (2 children)

How do the 'offspring' of Mandrake/Mandriva compare to one another? IIRC, there's ALT, Mageia, OpenMandriva, PCLinuxOS and ROSA.

I've also come to the understanding that what set Mandrake apart from its peers was its polish and user-friendliness. Which, harbored a great community back in the days. Currently, however, this role is fulfilled by distros like Linux Mint. Furthermore, most distros are relatively straightforward anyways. So, my other questions would be:

  • Could the argument be made that Linux Mint is the actual spiritual successor to Mandrake?
  • Are the Mandrake-offspring's most compelling raison d'être that they're Mandrake's offspring?
[–] bsergay 7 points 5 months ago

Not the person you asked, but they might have referred to the fact that (technically) Qubes OS is not a Linux distro because it's based on Xen instead. Though, even then, we might refer to it as a Xen distro (if anything).

[–] bsergay 1 points 5 months ago

Got anything to back that up?

[–] bsergay 3 points 5 months ago* (last edited 5 months ago)

Compartmentalization buys you disposable VMs.

And more.

TAILS is amnesic, which is an improvement to this.

How? Please focus on the security merits.

Everything is lost between sessions

If this is your reasoning to justify your earlier statement, please explain how this outdoes Qubes OS when it comes to security.


Btw, it seems you're conflating protection against forensics with a proper security model. In terms of security, TAILS does not provide anything remotely comparable to Qubes OS. Qubes OS is literally built differently. In case you enjoy tables.

[–] bsergay 4 points 5 months ago (2 children)

Windows 11 minimally requires: Memory: 4 gigabytes (GB) or greater.

Qubes OS minimally requires: Memory: 6 GB RAM

[–] bsergay 3 points 5 months ago* (last edited 5 months ago) (4 children)

Unfortunately my 8gb RAM (for which 2gb is dedicated for the iGPU) isn't enough. FWIW, this system could technically run Windows (11) without any troubles.

[–] bsergay 4 points 5 months ago (3 children)

Please correct me if I'm wrong, but isn't compartmentalization through virtualization the best solution we currently have?

[–] bsergay 5 points 5 months ago (2 children)

May as well contribute my own 😜.

I'm an absolute sucker for exquisitely hardened distros. Hence, distros like Qubes OS and Kicksecure have rightfully caught my interest. However, the former's hardware requirements are too harsh on the devices I currently own. While the latter relies on backports for security updates; which I'm not a fan of. Thankfully, there is also secureblue.

Contrary to the others, secureblue is built on top of an 'immutable' and/or atomic base distro; namely Fedora Atomic. By which:

  • It's protected against certain attacks.
  • Enables it to benefit from more recent advancements and developments that benefit security without foregoing robustness.

If security is your top priority, Qubes OS is the gold standard. However, secureblue is a decent (albeit inferior) alternative if you prefer current and/or 'immutable'/atomic distros.

[–] bsergay 4 points 5 months ago (6 children)

May as well contribute my own 😜.

I'm an absolute sucker for exquisitely hardened distros. Hence, distros like Qubes OS and Kicksecure have rightfully caught my interest. However, the former's hardware requirements are too harsh on the devices I currently own. While the latter relies on backports for security updates; which I'm not a fan of. Thankfully, there is also secureblue.

Contrary to the others, secureblue is built on top of an 'immutable' and/or atomic base distro; namely Fedora Atomic. By which:

  • It's protected against certain attacks.
  • Enables it to benefit from more recent advancements and developments that benefit security without foregoing robustness.

If security is your top priority, Qubes OS is the gold standard. However, secureblue is a decent (albeit inferior) alternative if you prefer current and/or 'immutable'/atomic distros.

[–] bsergay 15 points 5 months ago (11 children)

May as well contribute my own 😜.

I'm an absolute sucker for exquisitely hardened distros. Hence, distros like Qubes OS and Kicksecure have rightfully caught my interest. However, the former's hardware requirements are too harsh on the devices I currently own. While the latter relies on backports for security updates; which I'm not a fan of. Thankfully, there is also secureblue.

Contrary to the others, secureblue is built on top of an 'immutable' and/or atomic base distro; namely Fedora Atomic. By which:

  • It's protected against certain attacks.
  • Enables it to benefit from more recent advancements and developments that benefit security without foregoing robustness.

If security is your top priority, Qubes OS is the gold standard. However, secureblue is a decent (albeit inferior) alternative if you prefer current and/or 'immutable'/atomic distros.

view more: ‹ prev next ›