Qubes OS: The Operating System That Can Protect You Even If You Get Hacked

In order of decreasing isolation: For hardware and system's security QubesOS(i) is superb for isolation at the (virtual)machine layer. This talk(ii) from Micah Lee when 4.0 launched is a great overview/preview. It's my daily driver, and I find it indispensable. For software security any standard linux distro you can utilize encrypted chroots(iii). This is how things like crouton(iv) work on ChromiumOS. For library isolation you could utilise virtual environments like virtualenv for python. ( or nodenv(v) for 'Node libraries') (i) [link] (ii) ▶ this video (iii) [link] (iv) [link] (v) [link]

in “Ask HN: How do you develop locally with privacy/security in mind?” · View on HN

If you are paranoid about something like this happening, just use [link] . all usb devices are jailed in a non-networked vm by default. In general, if what you do warrants that level of paranoia, qubes will help you massively. Micah Lee held a great overview talk at HOPE 2018: ▶ this video

in “Usbkill – anti-forensic tool to halt computer when new USB device is connected” · View on HN

Micah Lee did a talk about how he does it. In essence he uses Tor to connect to the VPN. He also explains how to pay for the VPN anonymously. I think it was part of his Qubes OS talk: ▶ this video

in “How Is NordVPN Unblocking Disney+?” · View on HN