Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1120938" data-attributes="member: 96560">Have been running Qubes for 2 months as my primary box now. 8 gigs ram, 256 gig ssd. No show stoppers. But then, this box is 2022 hardware. It is a little bit slower than a normal distro, you have to count to 3 for a vm to start up.It&#039;s security barrier is not os accounts, like in Windows, but the individual vm&#039;s. You need to do least privilege and keep different classifications of data in separate vm&#039;s. But it is easier than signing in and out of Windows accounts, because all vm&#039;s are available simulataneously under one screen. You move things you downloaded to other vm&#039;s using the built in copy applet. Of course you never move exe&#039;s, that could break the security. You use the base template vm to install from the package manager, the individual vm&#039;s like personal work private will inherit it.&nbsp; And you use a vm dedicated to surfing and don&#039;t start the browser using the private and vault vm&#039;s, you can, but you shouldn&#039;t. It is procedural administrative control as opposed to technical, but you&#039;ll get the hang of it. (At least there is no hocus pocus UAC. If you haven&#039;t heard, MS says it is not a security barrier and refuses to fix UAC&nbsp; bypass problems. )And I have gotten rid of the Debian base template - no other prebuilt vm&#039;s uses it. I prefer Fedora anyways because of their fast updates.</blockquote>

[QUOTE="Victor M, post: 1120938, member: 96560"] Have been running Qubes for 2 months as my primary box now. 8 gigs ram, 256 gig ssd. No show stoppers. But then, this box is 2022 hardware. It is a little bit slower than a normal distro, you have to count to 3 for a vm to start up. It's security barrier is not os accounts, like in Windows, but the individual vm's. You need to do least privilege and keep different classifications of data in separate vm's. But it is easier than signing in and out of Windows accounts, because all vm's are available simulataneously under one screen. You move things you downloaded to other vm's using the built in copy applet. Of course you never move exe's, that could break the security. You use the base template vm to install from the package manager, the individual vm's like personal work private will inherit it. And you use a vm dedicated to surfing and don't start the browser using the private and vault vm's, you can, but you shouldn't. It is procedural administrative control as opposed to technical, but you'll get the hang of it. (At least there is no hocus pocus UAC. If you haven't heard, MS says it is not a security barrier and refuses to fix UAC bypass problems. ) And I have gotten rid of the Debian base template - no other prebuilt vm's uses it. I prefer Fedora anyways because of their fast updates. [/QUOTE]

Verification