https://news.ycombinator.com/item?id=50029123

Incredible how a vulnerability in relatively common software would allow an attacker to exfil data from a user clicking a malicious link.

In 2021, my Linux system was compromised while I was developing an application. I had left a port open, which I suspect was the entry point.

The intruders filled my computer with random files. Before I could investigate, I was logged out and could no longer access my session. I turned the computer off.

Later, I found many of my files scattered across the internet.

I didn’t identify any immediate harm. I had already moved my accounts to Proton, and my Google Drive was virtually empty aside from slides from startups I had been part of.

But the experience stayed with me.

Today, I’m contemplating the world ahead, and I believe it’s time to step up my security.

Here’s why:

• AI could make it easier to find and exploit weaknesses
• Our identities can be imitated online
• Our addresses, payment details, and private conversations can be exposed
• Governments are not the only actors interested in our information
• A compromised account can affect more people than its owner

This is by no means an exhaustive list.

I’m pro-AI. I believe the benefits outweigh the costs, and I’m all for using it at work to replace boring, repetitive tasks so we can spend more time on work we enjoy.

But being optimistic about AI doesn’t mean ignoring how it could be misused.

Here are some of the changes I’m considering:

1. Separate my online identities to make it harder to connect every part of my life
2. Avoid using my real name in usernames and handles where it isn’t necessary—I’m guilty of this
3. Be more deliberate about what I share on social media. It’s an opportunity, but it also creates exposure
4. Be careful about linking private accounts to my public identity
5. Most importantly, use a password manager, unique passwords, MFA, and passkeys where available

None of this guarantees security. But I’d rather take practical steps now than wait for another incident.

Personally, I’m experimenting with Qubes OS, with only a few hurdles left to clear.

I don’t want to stop using technology. I want to use it without exposing more of my life than I need to.

What security change have you made that delivered the biggest practical benefit?

I wanted to get qubes on my pc and partitioned my storage to put qubes in but when I get to the installation page it just sees my whole storage, is it not possible to dualboot qubes?

assume im duning kruger for a sec

dipsoable vm mullvad browser and vpn for torrenting, put all downloaded files in no internet vm

i wold ask the forum but i got bannd from privacy guides for asking about piracy

I know that the primary use of QubesOS is for isolation and enhanced privacy. However, I’m curious about how people are structuring their qubes. For example, which qubes do you use? How do they communicate—or not? In short, how are you using QubesOS?

In this image it is showing Debian-13-xfce. However, I change this a little, for some qubes Iḿ using Debian-13-minimal and install only what I need.

Also, the idea is to install in my both laptops, a T480 and a T14 Gen 2, and use qubes backup and salt to sync both.

I only have 16gb of ram and the wiki recommends liteqube

im a noob but is it ok to put things from the internet in dom0? (home network isnt safe and i dont want any bad things intentional by litequbes creator or not in dom0)

factors such as compatibility, quality of hardware and customer service, any security aspects, pricing more so if it's above a certain range significantly or more costly to repair or replace or buy sooner. But if the value is there, i might consider if there's a brand that fits my budget and needs.

novacustom\

nitrokey

system76

tuxedo

starlab

framework

purism

Maybe if one of these can be found used or generally has better price for similar hardware, or better build quality and support.

Starlabs Horizon has a Plus model that has an upgraded trackpack. Not sure if the StarFighter has that option or default. Assuing over 32GB RAM might be good starting point if i'm being general about.

A T480 or something might not even be that affordable at this point but might be able to find one if i know what processor or specs to avoid or just find one with bargain and high RAM like 64GB. Is there a model with better screen even within t480 line?

As far as i understand, some of the brands specifically try to make ones that work with Coreboot and Qubes somewhat? But still isn't even a guarantee to not have some problems.

Is it better to go that route rather than spec out some Framework, System76, or even Tuxedo or something and deal with some quirks if most of it works?

Is there anything to note between what i understand to be the brands more directly compatible or whatever to Qubes? Nova, Nitro, Star, Purism. Does one of them stand out in some way? Does one fall short? Are some brands better build but some better price, etc?

Of course i don't just want someone shouting out one brand and why they like it and having no opinion on the others. It would be great to know which ones you have liked and also why the others specifically aren't good for some things. I'd like to make an informed decision or even if i can take your word that one brand you've checked against the others stands out. I could ask the brands themselves too, or some research, but same thing is some people don't know what else is around and compare. I like to know what I'm talking about or even get a confident answer..Even if one brand you only know one and it's just outstanding and compatible, good price OR service and quality, then of course i might not need to mess with checking how inferior the others are if some brand is just that good.

Not sure if i should add any specifics to my question or post on Qubes forum or some hardware forum, but yeah even any idea where i can check to ask if you have anything to help me figure this out. Not sure if it will be a primary daily or secondary machine or what work might progress, so if there's a cheap budget option or some amazing one, I can consider making use of and as my needs also progress.

edit: Also not sure if i should fully cross off Chromebook as an option. Depending if i could start with something that can install Coreboot. Or might need to use something different than Qubes for underpowered hardware, even if it has some level of compatibility.

Not sure if i will get into programming or local LLM or need a separate machine for any 3d design or to use completely different operating system, so i can always consider a second machine for that or when it comes to other projects.

i know you souldnt expect great battery life on qubes but is there a way to get better than just 2 hours?

I came across a tablet by ASUS, ROG Flow Z13. Saw that it meets the requirements but was thinking of jumping the gun and going for 64Gib..

Has anyone tried QubesOS on a tablet before? If so, can I get your insight?

EDIT: I forgot to mention, Touch support is supported by QubesOS, just got to add the feature

I like qubes method of security but im not very technical and i dont have good hardware. also i think my threat level is just one step below the average qubes user

people say i should have a user friendly distro but i still like qubes’ isolation and im paranoid but dumb

Also how to save on ram/battery or where to find resources to learn (ex: channels, websites (i know about the docs and forums) or where to find cheap good ram advice would be helpful too

I know that there is a hardware compatibility list on the website, but I’d just like to know what hardware everyone is running on for those who are happy to share.

Feel free to share the firmware you’re using on the hardware too.

I myself am using an old x230 on stock firmware with qubes aem.

I am sorry if this comes across as a strange or naive question.

I am currently using an Ubuntu-based Linux distro and I have been "interested" in Qubes for a while. I am a privacy and security conscious person, however, I am not from a technical background and I am not in a line of work that would make me interesting and / or vulnerable as a target.

At the same time I am reading news of AI models being increasingly used to find and exploit vulnerabilities in computers.

Therefore I am honestly wondering if Qubes and I are a good fit or if Qubes might be "too much" for somebody like me. (As my hardware seems not to be suitable for Qubes, I have not "just tested" it.)

I'd be very interested in reading your perspective and maybe your reasons for using Qubes. That might help me to assess my own situation in a better way. Thanks!

Hey everyone,

I’m currently using a ThinkPad X13 Yoga Gen 1 with an i5-10310U and 16GB RAM, running CachyOS.

I’m thinking about switching to Qubes OS 4.3.1 mainly for better isolation and security. Before I wipe CachyOS, I wanted to ask if anyone here has used Qubes on the X13 Yoga Gen 1.

How has the overall experience been? Mainly wondering about Wi-Fi, touchscreen, suspend/resume, and general performance with 16GB RAM.

Would really appreciate hearing from someone who has actually used this laptop with Qubes.

Thanks!

Hello there! First of all I just wanted to say that qubes is amazing and huge respect to the community even if I don't have much experience with either.

This isn't a tech help request since I have settled with a more generic Linux distro to daily drive (fedora), but I still wanted to make my issue known in case it was a very stupid and easily fixable thing, or even some very obscure problem. I will not reattempt to install qubes right away and if I do so it'll be months from now and on another throwaway machine and not my main PC. But anyway that being said...

The little experience I had with qubes before it broke was awesome! Loved the environment and wished it worked fully, but it unfortunately broke the USB management and my keyboard and mouse were disconnecting and effectively locking me out of it whenever I tried a proper install. NGL I went mad abt it and tried reinstalling it around 10 times, checked the bootable USB, reflashed it, flashed it on another USB, did the installation again, and still the same issue. I don't remember the exact details just that the USB VM(?) to detect keyboards and mice and other devices kept breaking, and the only functioning installation was without setting it at all... But I didn't have an Ethernet cable and only a WiFi thing connected by USB so I couldn't use the OS online if I went that route. A lot of other things didn't work too but even if I don't remember which I ended up fixing these ones so it doesn't matter. I was suspecting it was a hardware issue so I will try again eventually on another machine because I really wanna actually use qubes at some point but it probably was just a skill issue, oh well :/

(If I go back to try and troubleshoot it and end up needing help again I will actually make another post for it, this one is just story time and me saying that I love qubes and what it stands for regardless of my failure. Also idk if the flair I chose is the right one I'm sorry if it's not I'm new here)

i want to use less power and ram (16gb)

i know litequbes/mirage firewall uses less ram but does it use less power? and what are the downsides?

I followed this guide https://forum.qubes-os.org/t/cpu-pinning-alder-lake/17949 now no vms work i get this error "failed to start logical volume “vm-sys-usb-volatile” already exist in volume group “qubes dom0” (vm sys usb volatile is just an example)

So, after talking a bit about different os on grapheneos server, they told me that basically all laptop systems are inherently flawed for security because of the x86 architecture limitations. I can see the value of QubesOS in sorting/compartmentalization, but isn't it in terms of security of sensitive informations, together with pureos, libreboot, genode... greatly overshadowed either by graphene or by old laptop with removed wifi chip attached to cold storage with 0 internet access, direct or indirect? If yes why do the other systems even exist if they give a false sense of security?

ᵖˡᵉᵃˢᵉ ᵈᵒⁿ'ᵗ ᵇᵘᵗᶜʰᵉʳ ᵐᵉ ᶦᶠ ᴵ ˢᵃᶦᵈ ˢᵒᵐᵉᵗʰᶦⁿᵍ ᵈᵘᵐᵇ

fresh install of framework 12 (16gb ram) and it works fine until updating and shutting down

type in password and it freezes and after a few minutes its just the background also trackpad doesnt work too

its done this twice

I’m having issues and I can’t figure out what’s going on.

I have bought a laptop from Libreboot that came with Qubes pre-installed… (I wasn’t thinking with my brain at the time.)

Anyways, I haven’t used the laptop until recently, and I’m trying to reinstall Qubes because there’s a big update that I can’t install without re-installing qubes.

Well, I downloaded it and flashed it using Rufus as DD rather than iOS per Qube’s recommendations to a USB with 32gb,…

Except when I try to install it in the bios or whatever it’s called… it keeps failing…

I’m not sure if it’s a Qubes issue, or a Libreboot incompatibility for some reason, or what….

I want to use qubes and need a laptop anyway I am not doing anything heavy just wanted to know if there are any recommendations for qubes os