Tag feed

1: Installing Qubes OS — Pre-Installation & Hardware Security

Apr 13 · 11 min read · Introduction: Why "Pre-Installation" Matters More Than You Think Most operating system guides treat the pre-installation phase as a mere formality: "Download the file, burn it to a USB, and go." With

7: Series Conclusion: Offline Qubes, Security Policies, and Trade-offs

Apr 7 · 8 min read · In the previous post, we explored the "Qubes Way" of using Disposable Qubes to automatically contain malware. We saw how the architecture ensures that even a successful exploit is rendered useless the

5: Security by Isolation – The Architecture of Containment

Apr 5 · 9 min read · In the previous post, we introduced Qubes OS as a "Reasonably Secure" operating system built on the Xen Type-1 Hypervisor. We learned that it doesn't try to be perfect; it tries to be resilient. But h

4: Qubes OS – The "Reasonably Secure" Operating System

Apr 4 · 7 min read · In the previous post, we dismantled the myth that tools like Tails, Whonix, or GrapheneOS can provide absolute security. We saw that they all rely on a Single Point of Failure, a kernel, a host OS, or

HAHesham Almataryheshamalmatary.hashnode.dev

CHERI-seL4: 6 reasons why CHERI support in seL4

Nov 3, 2024 · 8 min read · I have long debated that question, “what’s the point of CHERI if you have seL4 (and Rust)?” In a nutshell, CHERI C offers rich, deterministic memory safety and intra-address-space software compartmentalisation, which enhances the overall security of ...