On 10/19/2017 01:44 PM, Νικος Παπακαρασταθης wrote:
Hello

Is there any kind of end point security fore qubes xen hv except of isolation? 
Something like usual ...internet security software used in windows(antivirus 
antispam etc unified).If not how for example payments are safe?

Hi,

The typical Qubes thinking doesn't hold threat-scanning software (which is what I believe you're referring to) in high regard; it is seen as offering a false sense of security or creating additional attack surface. However, this doesn't mean you can't install AV scanners in your VMs... its up to you.

In addition to isolation, Qubes' templates offer some inherent protection as well because VMs based on them can resist rootkits. This idea is extended somewhat here: https://github.com/tasket/Qubes-VM-hardening (the 'systemd' branch is experimental but has an ability to scan files).

OTOH, one of the best things you can do to increase security of your appVMs is to practice some regular caution. You can, for instance install HTTPS Everywhere in your banking VM's browser and can even tell it to reject non-encrypted traffic. Also, avoid clicking on links in emails; if you copy-paste first you can review the actual domain name of the link. And email clients like Thunderbird try to detect phishing scams.

--

Chris Laprise, tas...@posteo.net
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/11d068df-fd93-6c22-bd51-1c013296ce5b%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

Reply via email to