On Thursday, April 30, 2020 at 11:09:59 AM UTC-5, Catacombs wrote:
>
> My apple is from 2009.  Which I upgraded until I got to Mac OS 10 Lion. 
>  One of the Apple tech support suggested to defer OS 10 updates as the 
> features added were for Syncing between different devices like IPhone, 
> IPad, ICloud, other Apple computers.  I would call them security holes. 
>  Besides Apple uses Broadcom for internet connection.  Not Foss.  And TAILS 
> says brooadcom  can not be spoofed.   
>
> My thought being to use Linux distro as the host.  Perhaps, pen testing.  
> A Linux Distro that has an extensive outgoing Firewall.  Then put VMware on 
> top of that, for $250.00.   
>
> But I am not anxious to do so if VMware is the total black box suggested 
> by poster.   
>
> I recall several years ago, a huge security hole, created in open source, 
> coding left to a group of enthusiasts, in Java.  A guy was begging not to 
> be banned for writing the security hole.  Pointing out his Patch had been 
> approved by very knowledgeable developers and he clearly had no intent to 
> create a security hole.   
>
> My point being open source and FOSS are not perfect.  Plus.  What no one 
> every talks about.  The NSA is one of the largest employers of 
> Mathematicians in the world.  I would guess the NSA is also one of the 
> biggest employers of really well trained Linux programmers.  That is. They 
> don’t, as Hollywood might suggests, hire their tech guys from script 
> kiddies who are in jail or probation.  They hire first rate minds who had 
> the work ethic to get a  Masters from places like MIT. USC.  First rate 
> Computer Science  programs.  These NSA tech guys are likely spending some 
> of their employers time in helping to fix Fedora, Debian, Perhaps Tails and 
> Qubes as well.   
>
> I am pretty sure China. China with the big C who is reputed to have a lot 
> of their who used computers in some way the government did not approve. 
> Such as, Telling the Truth of events.  Or just violating the big China 
> Firewall.  Big China has a large group of Linux programmers, who might be 
> helping Linux Distros as well.  Of course. In some small countries I 
> suspect their security services are not well trained computer specialists. 
>   Perhaps individuals who left schooling before middle school. But their 
> interrogation is more blunt bruising instruments. Heated objects.  Ropes. 
>  Cold water.   I might have gone to elementary school with some like that, 
> here in the US.
>
> Still China may have more qualified Linux programmers to pull apart Tor. 
> Tails. Qubes. Than their are qualified Linux people trying to make it work. 
>   
>
> There is another group of security concerns we never write about on the 
> Qubes site.  Our connection with the internet. Servers.  ISP software. 
> Server software.  Well actually we now hear of the 5G hazards.   
>
> How much more Secure is what I do with QUBEs versus something like VMware. 
>  Also assuming I am careful of how I use it.  That I have a formula to use. 
>  Reminding myself that “Encryption is more likely broken in Practice than 
> in Theory.”  That is. If we use poor techniques. Then all the encryption 
> available will not help us.   
>
> All that said. I will continue to use QUBEs. Because at least they try.   
>
> But another question obvious to many experienced QUBEs users.  Why Fedora 
> is emphasized over.  Say CentOS. Which is supposed to be the same as Red 
> Hat, CentOS having a delay in implementation?  Or a very limited hardened 
> Debian?


 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a84b7ad5-a2eb-4581-8eae-01ed7d0c4143%40googlegroups.com.

Reply via email to