My apple is from 2009.  Which I upgraded until I got to Mac OS 10 Lion.  One of 
the Apple tech support suggested to defer OS 10 updates as the features added 
were for Syncing between different devices like IPhone, IPad, ICloud, other 
Apple computers.  I would call them security holes.  Besides Apple uses 
Broadcom for internet connection.  Not Foss.  And TAILS says can not be 
spoofed.  

My thought being to use Linux as a host.  Perhaps, pen testing.  Linux that has 
an extensive outgoing Firewall.  Then put VMware on top of that, for $250.00.  

But I am not anxious to do so if VMware is the total black box suggested by 
poster.  

I recall several years ago, a huge security hole, created in open source, 
coding left to a group of enthusiasts.  A guy was begging not to be banned for 
writing the security hole.  Pointing out his Patch had been approved by very 
knowledgeable developers and he clearly had no intent to create a security 
hole.  

My point being open source and FOSS are not perfect.  Plus.  What no one every 
talks about.  The NSA is one of the largest employers of Mathematicians in the 
world.  I would guess the NSA is also one of the biggest employers of really 
well trained Linux programmers.  That is. They don’t, as Hollywood might 
suggest hire their tech guys from script kiddies who are in jail or probation.  
They hire first rate minds who have Masters from places like MIT. USC.  First 
rate CS programs.  These NSA tech guys are likely spending some of their 
employers time in helping to fix Fedora, Debian, Perhaps Tails and Qubes as 
well.  

I am pretty sure China. China with the big C who is reputed to have a lot of 
folks who used computers in some way the government did not approve. Telling 
the Truth of events.  Or just violating the big China Firewall.  Of course. In 
some small countries I suspect their security services are not well trained 
computer specialists.   Perhaps individuals who left schooling before middle 
school. But their interrogation is more blunt bruising instruments. Heated 
objects.  Ropes.  Cold water.  


Still China may have more qualified Linux programmers to pull apart Tor. Tails. 
Qubes. Than their are qualified Linux people trying to make it work.  

There is another group of security concerns we never write about on the Qubes 
site.  Our connection with the internet. Servers.  ISP software. Server 
software.  Well actually we now hear of the 5G hazards.  

How much more Secure is what I do with QUBEs versus something like VMware.  
Also assuming I am careful of how I use it.  That I have a formula to use.  
Reminding myself that “Encryption is more likely broken in Practice than in 
Theory.”  That is. If we use poor techniques. Then all the encryption available 
will not help us.  

All that said. I will continue to use QUBEs. Because at least they try.  

But another question obvious to many experienced QUBEs users.  Why Fedora is 
emphasized over.  Say CentOS. Which is supposed to be the same as RedHat, with 
delay in implementation?  Or a very limited hardened Debian?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e5bf794-3515-439e-9302-c56ce0f68cf9%40googlegroups.com.

Reply via email to