Replying to db2f6a66...

Too many people think full disk encryption solves everything. It doesn't.

Even possessing unencrypted VMs is a huge attack vector. Plausible deniability should be the first line of defense.

If a VM can't be run in an isolated, encrypted container, it loses 99% of its security.
Avatar
Derek Ross 3y ago

For my needs and my level of trust, Qubes does the job. What would you suggest as an alternative?

Reply to this note

Please Login to reply.

Discussion

db
db2f6a66... 3y ago

Qubes is a cool idea, but it isn't enough for me. If it works for you, it's good. But I never want my bare metal touching anything directly. I would suggested a small CLI Tor gateway (like Whonix), and then a few full-blown VMs connecting through it (or NAT, depending).

#[5]