If you're serious about security, @QubesOS is the best OS available today. It's what I use, and free. Nobody does VM isolation better.https://twitter.com/QubesOS/status/781451451797307392 …
Isolation is one thing, memory corruption prevention is another. You might need PaX/Grsec-based OS, @subgraph ?
-
-
Does PaX/Grsec in Dom0 mitigate some of the recent Xen vulnerabilities?
-
what
@subgraph basically does is try to make the kernel protected by PaX/Grsecurity and their sandboxing 1/2 -
applications, which is also an Isolation mechanism. 2/2
-
but nothing is 100%, what do you do if you think your subgraph is hacked?
-
there are still attack surfaces exists, that's for sure. I'm not a SGOS user technically. I like them because they integrated 1/2
-
I don't feel freedom to do what I want on subgraph, and I prefer ITL's philosophy. subgraph should be part of qubes which is future
-
IIUC, Subgraph is a FLOSS-based company. I don't see why they should be part of QubesOS. If QubesOS want to integrate PaX/Grsec
-
into QubesOS, it’d be awesome.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.