Joanna RutkowskaVerified account

... And it's hardly a consolation for me that @QubesOS makes such travel preps trivial easy :/

@rootkovska @QubesOS sounds awesome. Do you foresee it eventually running each individual app seamlessly in its own VM w usable performance?

@aral Running every app in sep VM makes little sense, as explained e.g. here: http://www.invisiblethingslab.com/resources/2014/Software_compartmentalization_vs_physical_separation.pdf … @rootkovska

@rootkovska Was thinking about usability / possible future mass adoption. If VMs were abstracted away, it would remove level of complexity.

.@aral There are other ways to hide VMs from the user. But turning every fork() into a VM is not the way. It also doesn't but much security.

Remember: @QubesOS is not as much about isolation (which is trivial), as it is about smart _integration_ over isolated compartments. @aral

@rootkovska Fair enough :) I wonder if auto-compartmentalisation may be an idea… Anyway, looking forward to playing with it :) +@QubesOS

@aral I think a combination of explicit and (pre-config + auto): e.g. explicit work/personal, but auto open attachments in disposable VMs.

@rootkovska What command do you use for the VM shred routine? Asking for a friend.

@bartongellman shred -vn1 /var/lib/qubes/appvms/$d/{private,volatile}.img

@rootkovska @cbrocas Full disk encryption hopefully solves that