If you are interested in improving your security posture and haven’t tried QubesOS, I highly recommend it. It does have a bit of a learning curve and requires patience but it’s the best option we have right now. It’s a xen (hypervisor) based OS where you can easily make everything an isolated VM. Happy to answer questions about it. I’ve been using it as my main driver for about 2 years now.
Discussion
Following now Anton, always love a new OS recomendation
Followed back 🤙 it’s the most secure option I’ve found so far. There’s also SpectrumOS which looks super promising but it’s not production ready and their supply chain security story is lacking at the moment.
Something to add
@npub1sn0wdenkukak0d9dfczzeacvhkrgz92ak56egt7vdgzn8pv2wfqqhrjdv9 ?? thanks in advance
not for the faint harted..but worth it if you have the patients
2 years ago, I read up on QubesOS while considering what Linux distro to try out (zero experience with Linux prior to this). I realized I was not technical enough at the time to build myself due to hardware requirements, but I knew I could learn and committed to being reasonable and going slow. I ordered a custom built box with QubesOS installed. This guaranteed I could avoid the hardware compatibility issue and helped me feel more confident, so I tore it all down and built it back up and slowly learned. It was a rollercoaster some days but overall, because I had no expectations of it being my daily driver it was great. At the end of 2022 I was confident enough to leave the training wheels and go full sovereign I found it rewarding and think Qubes OS is excellent.
That's a smart way to go about it. I took the slow road and switched to a couple different distro's but haven't had the time/balls/attention span to go deep on QubesOS. I went complete airgap with purism though and its been pretty useful Its the compartmentalizing that I tend to be attracted to.
Purism’s anti-interdiction services are simply amazing. Link for those who haven’t heard about it: https://puri.sm/posts/anti-interdiction-services/