Hello, to harden a system is much more efficient, as to hunt the hacker inside the network.
QubesOS makes a great job and I have personally much less "infections" as with other desktop OS, but perhaps this only a personal view. Security Playbook - rule 3 - assume always to be hacked and hunt the hackers... With the critical XEN bugs again, it shows that this rule 3 is true in the empiric circumstances. Ok, the hackers win again. So this means QubesOS would need some more hardening. i) HVM-DLP? Will it be possible to introduce a HVM-DLP data loss preventions. Action: If the DLP alert is thrown the network-VMs get locked, the background is reddish and some help text is explaining the next desinfection steps. All stored objects, which can move outbound, get signed. All objects, which are not signed and begin to move outbound, throw the DLP alert. The DLP matrix defines, which file-types and sources (folders) can move to which VMs and add some reason (why you like to move all objects from the folder x to the VM y in general)? With this groups, this will be more efficient to define the outbound-DLP rules. Any other behaviour locks this VM and quit the network for security reasons. The hard part would be the forensics: What is the root cause? How get the week browser breached? How can help me (VM upload to some AI analysis system)? ii) XEN replacement do-it-yourself It seems that is perhaps more efficient to build some secure module by yourself, instead to hunt the tricky back-doors? How much will donations will be necessary to build some op-code hypervisor, very efficient, feature-rich and back-door-proof? Funny IT. If some patient has some brain damage, than normally he/she has less intelligent functions. But this funny IT-bugs, some random-damage, lead many times to higher intelligent functions, which supports some very desirable features, for very keen persons. But thanks a lot for his enormous efforts for hunting and hardeing! Kind Regards -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4671e8a6-1ec1-4550-8a44-28c8952041d2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
