Virtual machines are awesome and have many incredibly great uses. However, they aren't awesome for everything. I would personally tend to avoid machines if I couldn't run an OS on the bare metal for many purposes.
This is basically what Qubes does. I quite like it, and it is surprisingly useable considering what's involved. Still, stopped using it after a while because running a 'native' OS is just less friction, and I didn't think the additional security was worth it on my dev box. Still planning to setup a general use box with it at some stage.
The article seems to be gone from the website... but my standard diatribe could still fit... here's the tldr:
Current OS designs can't protect themselves because they lack "capabilities".. a concept created to solve problems during the Vietnam war, perfected in the 1970s and then forgotten by almost everyone... except a few folks, some of whom are at genode.org
5 comments
[ 3.4 ms ] story [ 15.3 ms ] threadCurrent OS designs can't protect themselves because they lack "capabilities".. a concept created to solve problems during the Vietnam war, perfected in the 1970s and then forgotten by almost everyone... except a few folks, some of whom are at genode.org