When security matters: working with Qubes OS at the Guardian
When security matters: working with Qubes OS at the Guardian
The latest version of the whistleblowing platform SecureDrop runs on the Qubes operating system. At the Guardian we used the Salt management engine to set up a Qubes environment where journalists could safely interrogate sensitive documents.
I love the fact how all the things they list make sense for security and then there's just:
A Nautilus extension
Of course, when reading on, the article mentions it's there for convenience to avoid having to open a terminal, but I still found it really funny when reading the list.
How about:
A custom package installed from a private repository hosted in Amazon S3
Honestly, once you use Qubes there's no going back. Its a game changer that's magnitudes safer than running everything on one system or trying to silo some subset of your work to dedicated VMs manually
Really? There are some pretty serious trade-offs that Qubes requires if you're going to use it as your daily driver. I'm far more security-conscious than anyone I know, but I couldn't bring myself to make those trade-offs.
Interesting. Care to elaborate ?
Like what? It takes a fe extra clicks to use a microphone or camera. I like this.