#qubes os

[amalgamasreal]

Updated Personal Infosec Post

Been awhile since I've had one of these posts part deus: but I figure with all that's going on in the world it's time to make another one and get some stuff out there for people. A lot of the information I'm going to go over you can find here:

https://www.privacyguides.org/en/tools/

So if you'd like to just click the link and ignore the rest of the post that's fine, I strongly recommend checking out the Privacy Guides. Browsers: There's a number to go with but for this post going forward I'm going to recommend Firefox. I know that the Privacy Guides lists Brave and Safari as possible options but Brave is Chrome based now and Safari has ties to Apple. Mullvad is also an option but that's for your more experienced users so I'll leave that up to them to work out. Browser Extensions:

uBlock Origin: content blocker that blocks ads, trackers, and fingerprinting scripts. Notable for being the only ad blocker that still works on Youtube.

Privacy Badger: Content blocker that specifically blocks trackers and fingerprinting scripts. This one will catch things that uBlock doesn't catch but does not work for ads.

Facebook Container: "but I don't have facebook" you might say. Doesn't matter, Meta/Facebook still has trackers out there in EVERYTHING and this containerizes them off away from everything else.

Bitwarden: Password vaulting software, don't trust the password saving features of your browsers, this has multiple layers of security to prevent your passwords from being stolen.

ClearURLs: Allows you to copy and paste URL's without any trackers attached to them.

VPN: Note: VPN software doesn't make you anonymous, no matter what your favorite youtuber tells you, but it does make it harder for your data to be tracked and it makes it less open for whatever public network you're presently connected to.

Mozilla VPN: If you get the annual subscription it's ~$60/year and it comes with an extension that you can install into Firefox.

Mullvad VPN: Is a fast and inexpensive VPN with a serious focus on transparency and security. They have been in operation since 2009. Mullvad is based in Sweden and offers a 30-day money-back guarantee for payment methods that allow it.

Email Provider: Note: By now you've probably realized that Gmail, Outlook, and basically all of the major "free" e-mail service providers are scraping your e-mail data to use for ad data. There are more secure services that can get you away from that but if you'd like the same storage levels you have on Gmail/Ol utlook.com you'll need to pay.

Tuta: Secure, end-to-end encrypted, been around a very long time, and offers a free option up to 1gb.

Mailbox.org: Is an email service with a focus on being secure, ad-free, and privately powered by 100% eco-friendly energy. They have been in operation since 2014. Mailbox.org is based in Berlin, Germany. Accounts start with up to 2GB storage, which can be upgraded as needed.

Email Client:

Thunderbird: a free, open-source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Matrix) client developed by the Thunderbird community, and previously by the Mozilla Foundation.

FairMail (Android Only): minimal, open-source email app which uses open standards (IMAP, SMTP, OpenPGP), has several out of the box privacy features, and minimizes data and battery usage.

Cloud Storage:

Tresorit: Encrypted cloud storage owned by the national postal service of Switzerland. Received MULTIPLE awards for their security stats.

Peergos: decentralized and open-source, allows for you to set up your own cloud storage, but will require a certain level of expertise.

Microsoft Office Replacements:

LibreOffice: free and open-source, updates regularly, and has the majority of the same functions as base level Microsoft Office.

OnlyOffice: cloud-based, free

FreeOffice: Personal licenses are free, probably the closest to a fully office suite replacement.

Chat Clients: Note: As you've heard SMS and even WhatsApp and some other popular chat clients are basically open season right now. These are a couple of options to replace those. Note2: Signal has had some reports of security flaws, the service it was built on was originally built for the US Government, and it is based within the CONUS thus is susceptible to US subpoenas. Take that as you will.

Signal: Provides IM and calling securely and encrypted, has multiple layers of data hardening to prevent intrusion and exfil of data.

Molly (Android OS only): Alternative client to Signal. Routes communications through the TOR Network.

Briar: Encrypted IM client that connects to other clients through the TOR Network, can also chat via wifi or bluetooth.

SimpleX: Truly anonymous account creation, fully encrypted end to end, available for Android and iOS.

Now for the last bit, I know that the majority of people are on Windows or macOS, but if you can get on Linux I would strongly recommend it. pop_OS, Ubuntu, and Mint are super easy distros to use and install. They all have very easy to follow instructions on how to install them on your PC and if you'd like to just test them out all you need is a thumb drive to boot off of to run in demo mode. For more secure distributions for the more advanced users the options are: Whonix, Tails (Live USB only), and Qubes OS.

On a personal note I use Arch Linux, but I WOULD NOT recommend this be anyone's first distro as it requires at least a base level understanding of Linux and liberal use of the Arch Linux Wiki. If you game through Steam their Proton emulator in compatibility mode works wonders, I'm presently playing a major studio game that released in 2024 with no Linux support on it and once I got my drivers installed it's looked great. There are some learning curves to get around, but the benefit of the Linux community is that there's always people out there willing to help. I hope some of this information helps you and look out for yourself, it's starting to look scarier than normal out there.

[derechodelared]

Qubes OS: Un sistema operativo enfocado en la seguridad y aislamiento

Qubes OS: Un sistema operativo enfocado en la seguridad y aislamiento

Qubes OS es un sistema operativo de código abierto, centrado en la seguridad y el aislamiento de las aplicaciones y datos del usuario. Con una arquitectura innovadora que separa las funciones del sistema en múltiples “qubes” o compartimentos aislados, Qubes OS protege la información y las actividades del usuario de posibles ataques y vulnerabilidades. A continuación, se describen las…

[tailsos-official]

how secure are you in comparison to qubes

I kean if we're talking a straight up security fight, From what I know about qubes it would probably go to them, but we're also filling two seperate niches. The point of me is to be lightweight and sneaky. An ideal scenario means you use me on an otherwise insecure public computer, do your thing, then reboot and leave before anybody even knows I was there, whereas qubes is a more stationary OS, meant to be installed on a more stationary system. it just depends on the usecase. We're both solving the same problem in different ways

[shinelikethunder]

Hello there! I hope you don’t mind me just dropping into your asks like this, but by all means def feel free to just delete this if so, it is kind of a weird ask.

This is the anon from the computer blog asking about a private laptop for collage! After doing (a small amount of) research into Linux, one thing that’s super confusing to me, is… how does one know which distro to use? You mentioned in the replies of the post that you use Ubuntu Linux, which seems to be one of the more popular ones. Would you recommend — and if so, why? Is it good for privacy, do you think? The best? Does the user need to have a good deal of experience with computers to keep it running? (I’ve never used a laptop before but I don’t mind trying to learn stuff)

Also this is an EXTREMELY stupid question my apologies, but how….. exactly do you put Linux on a laptop? OP from my ask said to buy a laptop with no OS but is that something you can do? I’d think so, since 0P works with computer and stuff as their job, but Reddit says that it’s not really possible and that you should just “buy like a Windows laptop and scrap the software”??? Is that… correct? How did you install Linux on your laptop — did y ou have to remove software off it or did you, as OP says, manage to find a laptop with no OS?

Again, feel free to ignore if you don’t wanna put in the time/effort to reply to this, I absolutely don’t mind — it’s a lot of stuff I’m asking and you didn’t invite it all, so ofc feel free to delete the ask if you’d like!

ha, you've zeroed in on one of the big reasons Linux is kind of a contrarian choice for me to recommend: the wild proliferation of distros, many of them hideously complex to work with. luckily, the fact that most of them are niche offshoots created by and for overly-technical nerds makes the choice easier: you don't want those. you want one of the largest, best-supported, most popular ones, with a reputation for being beginner-friendly. the two biggies are Ubuntu and Linux Mint; i'd recommend focusing your research there.

this isn't JUST a popularity-contest thing: the more people use it, the more likely you are to find answers if you're having trouble or plugging a weird error message into google, and the greater the variety of software you'll find packaged for easy install in that distro. some combination of professional and broad-based community support means you'll find better documentation and tutorials, glitches will be rarer and get fixed faster, and the OS is less likely to be finicky about what hardware it'll play nice with. the newbie-friendly ones are designed to be a breeze to install and to not require technical fiddling to run them for everyday tasks like web browsing, document editing, media viewing, file management, and such.

info on installation, privacy, personal endorsement, etc under the cut. tl;dr: most computers can make you a magic Linux-installing USB stick, most Linuces are blessedly not part of the problem on privacy, Ubuntu i can firsthand recommend but Mint is probably also good.

almost all Linux distros can be assumed to be better for privacy than Windows or MacOS, because they are working from a baseline of Not Being One Of The Things Spying On You; some are managed by corporations (Ubuntu is one of them), but even those corporations have to cater to a notoriously cantankerous userbase, so most phoning-home with usage data tends to be easy to turn off and sponsored bullshit kept minimally intrusive. the one big exception i know of is Google's bastard stepchild ChromeOS, which you really don't want to be using, for a wide variety of reasons. do NOT let someone talk you into installing fucking Qubes or something on claims that it's the "most private" or "most secure" OS; that's total user-unfriendly overkill unless you have like a nation-state spy agency or something targeting you, specifically.

how to install Linux is also not a dumb question! back in the day, if you wanted to, say, upgrade a desktop computer from Windows 95 to Windows 98, you'd receive a physical CD-ROM disc whose contents were formatted to tell the computer "hey, i'm not a music CD or a random pile of backup data or a piece of software for the OS to run, i want you to run me as the OS next time you boot up," and then that startup version would walk you through the install.

nowadays almost anyone with a computer can create a USB stick that'll do the same thing: you download an Ubuntu installer and a program that can perform that kind of formatting, plug in the USB stick, tell the program to put the installer on it and make it bootable, and then once it's done, plug the USB stick into the computer you want to Linuxify and turn it on.

Ubuntu has an excellent tutorial for every step of the install process, and an option to do a temporary test install so you can poke around and see how you like it without pulling the trigger irreversibly: https://ubuntu.com/tutorials/install-ubuntu-desktop

having a way to create a bootable USB stick is one reason to just get a Windows computer and then let the Linux installer nuke everything (which i think is the most common workflow), but in a pinch you can also create the USB on a borrowed/shared computer and uninstall the formatter program when you're done. i don't have strong opinions on what kind of laptop to get, except "if you do go for Linux, be sure to research in advance whether the distro is known to play nice with your hardware." i'm partial to ThinkPads but that's just, like, my opinion, man. lots of distros' installers also make it dead simple to create a dual-boot setup where you can pick between Windows and Linux at every startup, which is useful if you know you might have to use Windows-only software for school or something. keep in mind, though, that this creates two little fiefdoms whose files and hard-disk space aren't shared at all, and it is not a beginner-friendly task to go in later and change how much storage each OS has access to.

i've been using the distro i'm most familiar with as my go-to example throughout, but i don't really have a strong opinion on Ubuntu vs Mint, simply because i haven't played around with Mint enough to form one. Ubuntu i'll happily recommend as a beginner-friendly version of Linux that's reasonably private by default. (i think there's like one install step where Canonical offers paid options, telemetry, connecting online accounts, etc, and then respects your "fuck off" and doesn't bug you about it again.) by reputation, Mint has a friendlier UI, especially for people who are used to Windows, and its built-in app library/"store" is slicker but offers a slightly more limited ecosystem of point-and-click installs.

(unlike Apple and Google, there are zero standard Linux distros that give a shit if you manually install software from outside the app store, it's just a notoriously finicky process that could take two clicks or could have you tearing your hair out at 3am. worth trying if the need arises, but not worth stressing over if you can't get it to work.)

basic software starter-pack recommendations for any laptop (all available on Windows and Mac too): Firefox with the uBlock Origin and container tab add-ons, VLC media player, LibreOffice for document editing. the closest thing to a dealbreaking pain in the ass about Linux these days (imo) is that all the image and video editing software i know of is kinda janky in some way, so if that's non-negotiable you may have to dual-boot... GIMP is the godawfully-clunky-but-powerful Photoshop knockoff, and i've heard decent things about Pinta as a mid-weight image editor roughly equivalent to Paint.net for Windows.

[qubesos-official]

as of today, you can easily put @fedora-official 41 inside me

[post-leffert]

AnarSec: Tech Guides for Anarchists

AnarSec is a new resource designed to help anarchists navigate the hostile terrain of technology — defensive guides for digital security and anonymity, as well as offensive guides for hacking. All guides are available in booklet format for printing and will be kept up to date.

As anarchists, we must defend ourselves against police and intelligence agencies that conduct targeted digital surveillance for the purposes of incrimination and network mapping. With the defensive series, our goal is to obscure the State’s visibility into our lives and projects. Our recommendations are intended for all anarchists, and they are accompanied by guides to put the advice into practice.

With the upcoming offensive series, we hope to contribute to the practice of hacking the State and capital. Astute readers may notice that the art featured on our homepage and booklets is taken from communiqués detailing how anarchists robbed a bank (Phineas Fisher) and destroyed police servers (AntiSec) using only a keyboard.

The defensive series currently includes:

Tails

Tails for Anarchists

Tails Best Practices

Qubes OS

Qubes OS for Anarchists

Phones

Kill the Cop in Your Pocket

GrapheneOS for Anarchists

General

Linux Essentials

Remove Identifying Metadata From Files

Encrypted Messaging for Anarchists

Make Your Electronics Tamper-Evident

[hackernewsrobot]

Working with Qubes OS at the Guardian

https://www.theguardian.com/info/2024/apr/04/when-security-matters-working-with-qubes-os-at-the-guardian

[pc-freedom]

Qubes OS：セキュリティ重視の仮想化ベースLinuxディストリビューション

Qubes OS は、仮想化技術を活用して高度なセキュリティを提供する Linux ディストリビューションです。各アプリケーションやワークスペースを独立した「仮想キューブ」に分離することで、システム全体のセキュリティを大幅に強化します。Qubes OS は、プライバシー重視のユーザーやセキュリティの必要性が高いユーザーに特に向いています。 Continue reading Qubes OS：セキュリティ重視の仮想化ベースLinuxディストリビューション

[i-bet-the-max-limit-is-32-symbol]

Adding to this there is also Qubes OS if one is able to install it: https://www.qubes-os.org/

Whonix which is like tails but can be run inside of a VM (or in various other ways): https://www.whonix.org/

Mullvad VPN which is a vpn service that doesn't require any personally identifiable information and costs 5 euros per month: https://mullvad.net/en

I2P which is similar to TOR: https://geti2p.net/en/

and this site which has all sorts of other digital privacy information: https://www.privacyguides.org/en/

Anyway American trans friends, now's the time to put "be gay do crime" into practice and the first step is to get onto secure communication channels so you're not discussing details of what you're doing and how on the public internet.

[just-my-insufferable-existance]

I just learned about the existence of Qubes OS yesterday.

I don't know much about it, but it's a security oriented OS.

I have a laptop that runs windows. I was planning on dual booting Linux on it. Maybe Debian?

I'd love another little laptop to throw QubesOS on. I got lucky with my laptop, I recovered it for a friend, who sold it to me.

[howtoincreasespeedofvpnconnectio]

do i need a vpn with qubes

🔒🌍✨ Get 3 Months FREE VPN - Secure & Private Internet Access Worldwide! Click Here ✨🌍🔒

do i need a vpn with qubes

VPN benefits with Qubes

Title: Maximizing VPN Benefits with Qubes OS: A Comprehensive Guide

In today's digital age, safeguarding online privacy and security has become paramount. With the proliferation of cyber threats and the omnipresent surveillance by both malicious actors and even governments, individuals are increasingly turning to Virtual Private Networks (VPNs) to protect their internet activities. However, simply using a VPN may not provide comprehensive security, especially when combined with a traditional operating system. This is where Qubes OS shines, offering a robust platform that enhances the benefits of VPN usage.

Qubes OS is a security-focused operating system that compartmentalizes applications into separate virtual machines called "qubes." Each qube is isolated from the others, creating a unique environment for different tasks. By leveraging Qubes OS alongside a VPN, users can amplify their online security and privacy in several ways.

Firstly, Qubes OS allows users to dedicate specific qubes exclusively for VPN connections. This ensures that all internet traffic routed through these qubes is encrypted and anonymized, providing a strong shield against potential eavesdropping and data interception.

Moreover, Qubes OS enables users to compartmentalize their online activities further. By segregating tasks into separate qubes, individuals can isolate sensitive activities, such as online banking or accessing confidential documents, from other less secure tasks, such as web browsing or social media usage. This isolation prevents potential leaks of sensitive information even if one qube is compromised.

Additionally, Qubes OS supports VPNs that offer advanced features such as multi-hop connections and kill switches. Multi-hop VPNs route internet traffic through multiple servers, further obscuring the user's online footprint. Kill switches automatically disconnect the internet if the VPN connection is interrupted, preventing data leaks in case of VPN failure.

In conclusion, combining the benefits of VPNs with the security features of Qubes OS offers a potent solution for safeguarding online privacy and security. By leveraging the compartmentalization capabilities of Qubes OS alongside a VPN, individuals can enjoy enhanced protection against cyber threats and maintain greater control over their digital lives.

Qubes OS VPN setup

Qubes OS, known for its robust security features, provides a secure platform for users concerned about privacy and online anonymity. One essential aspect of maintaining privacy is using a Virtual Private Network (VPN) to encrypt internet traffic and mask the user's IP address. Setting up a VPN in Qubes OS involves a few straightforward steps to enhance your online security and anonymity.

Firstly, select a reliable VPN service provider that offers compatibility with Qubes OS. Ensure that the provider offers strong encryption protocols and has a strict no-logs policy to safeguard your privacy effectively.

Next, within the Qubes OS environment, create a new ProxyVM specifically dedicated to handling VPN connections. This ProxyVM will serve as an intermediary between your AppVMs (virtual machines) and the VPN server.

Once the ProxyVM is created, install the necessary VPN client software within it. Follow the instructions provided by your VPN service provider to configure the client settings correctly. This typically involves entering the VPN server address, authentication credentials, and selecting preferred encryption protocols.

After configuring the VPN client in the ProxyVM, ensure that all AppVMs route their internet traffic through the VPN ProxyVM. This can be achieved by adjusting the network settings of each AppVM to route traffic through the VPN ProxyVM.

Finally, test the VPN connection to confirm that it is functioning correctly. You can do this by visiting a website that displays your IP address and verifying that it matches the IP address provided by your VPN service.

By following these steps, you can effectively set up a VPN in Qubes OS to enhance your online privacy and security. Remember to regularly update your VPN client software and adhere to best practices for maintaining online anonymity.

Security advantages of VPN on Qubes

VPN, short for Virtual Private Network, offers numerous security benefits when used on the Qubes operating system. Qubes OS is a security-focused operating system that compartmentalizes tasks into separate virtual machines, known as qubes, to enhance security and isolate potential threats. When combined with a VPN, Qubes OS becomes even more secure, providing users with additional layers of protection.

One of the main security advantages of using a VPN on Qubes is encryption. A VPN encrypts internet traffic, making it nearly impossible for anyone to intercept and decipher data being transmitted. This is especially crucial when connecting to public Wi-Fi networks, where cybercriminals may lurk to steal sensitive information. With a VPN on Qubes, all internet traffic is encrypted and secure, safeguarding user data and privacy.

Additionally, a VPN on Qubes enhances anonymity and privacy online. By masking one's IP address and location, a VPN ensures that online activities remain private and untraceable. This is particularly valuable for users who prioritize anonymity and want to prevent websites or third parties from tracking their online behavior.

Moreover, when using a VPN on Qubes, users can bypass geographical restrictions and access content that may be blocked in their region. This is beneficial for individuals who wish to stream geo-restricted content or access websites that are not available in their country.

In conclusion, the security advantages of using a VPN on Qubes OS are substantial. From encrypting internet traffic to enhancing anonymity and bypassing geo-blocks, a VPN complements the security features of Qubes OS, providing users with a safer and more private online experience.

VPN necessity for Qubes OS

In the realm of cybersecurity, Qubes OS stands out as a formidable fortress, offering unparalleled security through compartmentalization. However, even within this fortress, there lies a crucial aspect that cannot be overlooked: the necessity of a Virtual Private Network (VPN).

Qubes OS excels in isolating different tasks and applications into separate virtual machines, creating a robust defense against various threats. However, without a VPN, your online activities within these virtual machines are still susceptible to potential breaches of privacy and security.

One of the primary reasons a VPN is essential for Qubes OS users is the added layer of encryption it provides. While Qubes OS ensures isolation between different domains, a VPN encrypts your internet traffic, making it virtually impossible for malicious actors to intercept and decipher your data, even if they manage to breach one of your virtual machines.

Moreover, Qubes OS users often prioritize anonymity and privacy. By routing your internet connection through a VPN server, you mask your true IP address, making it significantly harder for websites, advertisers, or even your internet service provider to track your online activities.

Additionally, Qubes OS users frequently engage in activities that require enhanced privacy, such as accessing sensitive information or communicating securely. A VPN offers peace of mind by creating a secure tunnel for your data to travel through, shielding it from prying eyes and potential threats.

In conclusion, while Qubes OS provides a robust security framework, incorporating a VPN into your digital arsenal is crucial for ensuring comprehensive protection. By encrypting your internet traffic, preserving anonymity, and enhancing privacy, a VPN complements the security features of Qubes OS, creating a fortified environment where your online activities remain secure and confidential.

Qubes privacy protection with VPN

Qubes OS is a security-focused operating system that allows you to compartmentalize your digital life into separate virtual machines. This unique approach helps enhance privacy and security by isolating different tasks and applications within their own container. One effective way to further bolster your privacy protection while using Qubes OS is by utilizing a Virtual Private Network (VPN).

A VPN encrypts your internet connection, ensuring that your online activities remain secure and private. By rerouting your internet traffic through a remote server, a VPN masks your IP address and makes it difficult for third parties to monitor your online behavior. This is particularly useful when using public Wi-Fi networks or accessing sensitive information online.

When integrated with Qubes OS, a VPN adds an extra layer of security to your digital environment. By configuring each Qubes virtual machine to connect to the VPN independently, you can ensure that each compartment benefits from the VPN's encryption and anonymity features. Whether you're browsing the web, accessing online services, or communicating over the internet, a VPN within Qubes OS helps safeguard your data and online identity.

It's important to choose a reliable VPN provider that prioritizes privacy and does not log user activities. Additionally, regularly updating your Qubes OS installation and VPN client helps maintain optimal security levels. By combining the privacy-enhancing capabilities of Qubes OS with the encryption and anonymity offered by a VPN, you can enjoy a more secure and private online experience.

[vpn-br]

Atualizações do aplicativo NordVPN para Linux

A NordVPN, uma das líderes no mercado de VPN, continua a aprimorar seu aplicativo para Linux, oferecendo atualizações regulares para aumentar a segurança, melhorar a funcionalidade e garantir uma experiência de usuário ideal.

Última atualização disponível: NordVPN 3.17.4

A NordVPN anunciou recentemente uma nova atualização do seu aplicativo Open Source para usuários do Linux. As configurações de DNS não funcionavam corretamente quando a descoberta de rede local estava ativada. Esse bug não existe mais. Em alguns sistemas, o comando resolvectl não funcionou corretamente desde a atualização 3.17.1. O aplicativo voltou a funcionar sem nenhum problema. NordVPN 3.17.3 A rede Mesh de dispositivos conectados a um servidor OpenVPN estava sistematicamente desconectando a conexão. Esse bug foi corrigido. NordVPN 3.17.2 Foi corrigido o erro relacionado às configurações de IPv6 na versão 3.17.1, que causava problemas de rede. NordVPN 3.17.1 Esta atualização traz melhorias significativas e correções de erros para garantir uma conexão VPN mais estável e segura. Com essa atualização, a NordVPN se alinha melhor com suas preferências de DNS personalizado. Se você tiver configurado seu arquivo /etc/resolv.conf como somente leitura, suas configurações de DNS permanecerão inalteradas.

O aplicativo NordVPN para Linux: Compatibilidade e operação

O cliente VPN seguro da NordVPN está disponível para várias arquiteturas, incluindo aarch64, armv5, armv7, i386 e x86_64, exigindo uma versão mínima do kernel de 3.7.0 para aarch64 e 3.2.0 para outras arquiteturas. Fortalecido por contribuições da comunidade, o aplicativo VPN para Linux é totalmente Open Source. A NordVPN oferece pacotes .deb e .rpm para sistemas Linux baseados em Debian e RHEL, incluindo Ubuntu, Debian, Elementary OS, Linux Mint, Fedora, RHEL, CentOS, Qubes OS e openSUSE, garantindo ampla compatibilidade e fácil instalação para uma variedade de usuários Linux. Para instalar o NordVPN em seu sistema Linux, siga as instruções detalhadas disponíveis no site oficial do NordVPN e em sua página de suporte. O aplicativo usa comandos simples para facilitar o gerenciamento da conexão VPN. Os usuários podem se conectar a um servidor específico, mudar de servidor ou ajustar as configurações de segurança conforme necessário, tudo por meio do terminal. Read the full article

[hackernewsrobot]

Qubes OS: A reasonably secure operating system

https://www.qubes-os.org/