*Quoted quoted reply: Ulrich Windl (on Mon, May 04, 2020 at 09:50:31PM +0200)Quoted reply: Sven Semmler (on May 04 06:37PM -0500)*
... > I severely doubt you can convince the typical Windows user to use QubesOS > for daily work. "Security" is not a product you can buy, and "security" is > the "is the opposite of "comfort". > Security and comfort are more like two opposing poles of a continuum. Personally I do think Qubes does a rather excellent job of > demonstrating "reasonable security". ... The terms 'security' and 'comfort' (IMHO) are not so closely related as you both imply. You can have high security whilst at the same time maintaining comfort, especially when security runs in the background without the user having much involvement. It should be noted that even Windows (supposedly designed for 'stupid people') does have a certain level of security. Whilst QubesOS may never be widely adopted, the research artefacts produced in the development of QubesOS may end-up being incorporated in other popular operating systems (including Windows). From this perspective, QubesOS may be a very worthwhile endeavour. > > People want comfort not security. Why else would they use Alexa or > Google assistant or Siri, dubious password managers, etc.? > ... People also want security. In fact, they want security in respect of real security needs. It just depends on how much security is acceptable. I think it's important to think about these things in the context of 'threat models'. In my non-business related activities, I often just don't care whether people are spying on me, and also whether they steal intellectual property from me. Sometimes, such illicit activities may even work to my favour (in a round-about way). Matching security to such a threat model, can mean that you only need very low security. On the other hand, for my business activities, especially in respect of legal requirements, security is very important, both for my business, and my clients. > ... Qubes for private use without the user recognizing the need is unrealistic. ... > > Qubes for private use without the user recognising the need may still be realistic. Users are often completely oblivious to the functionality of OEM software. Manufacturers may choose to pre-install QubesOS regardless of whether users recognise the need for security. Kind regards, Mark Fernandes -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b9948f2e-9b65-424e-9209-868d541ebd83%40googlegroups.com.
