[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology

Name
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
File
  • Please read the Rules and FAQ before posting.
  • You may highlight syntax and preserve whitespace by using [code] tags.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


Janitor applications are now open. Apply here!


[Advertise on 4chan]


File: openbsdvsqubesos.png (232 KB, 1297x541)
232 KB PNG
These two operating systems both focus on security, but they approach it from different directions, OpenBSD tries to do security by making sure code is perfect and exploit-free through auditing and vetting while QubesOS just isolates everything in a VM, which of these approaches actually provides better security?
>>
>>108963361
OpenBSD has a few exploits baked in by the devs. Fuck em
>>
>>108963398
>Source: I saw it in a dream
>>
>>108963398
Okay? Name them
>>
>>108963361
>usecase
qubes has very specific hardware requirements and is for desktops. openbsd can run on basically anything and is meant for servers but you can use it as a desktop anyway
>>
>>108963361
I don't know about security, but I've been using qubes and it's pretty great in terms of user experience, I have windows and a bunch of linux distros on it. Only problem is is that updating and upgrading is a little annoying, especcially if you have to change out out of date templates.
>>
>>108963361
Microkernels - NOVA/Genode (Sculpture os).
In there run VMs with OpenBSD.
That should be the very secure setup.
>>
>>108963361
secureblue
>>
File: cia.jpg (30 KB, 680x361)
30 KB JPG
>>108963398
>openbsd bad! because I say so!
>noooo I can't show the PoC
>>
>>108963361
I'd trust OpenBSD for servers and routers, but desktop-targeted attacks often rely on user mistakes and large attack surfaces, which good code can't holistically mitigate but isolation might.
>>
File: 929183.png (63 KB, 280x280)
63 KB PNG
pufferfish wit da big ass lip
>>
>>108963745
That's just Qubes but worse
>>
None, they're not first class capability OSs, which is what people would actually be investing money to develop if they cared about security. But most people and most companies only say they care about security. What they really care about is money and making money fast and also power. Security (especially of their users) is practically unimportant. So what if half their userbase gets fucked by an RCE? Not their pronblem, nothing personnel.
>>
>>108963361
Qubes has a really clunky way to virtualize applications and give access to files. They are just complete virtual machines that have no way to access files in other vms. Really not worth it if you value your time and sanity. It also just makes it more convenient to combine multiple applications and files in the same VM, which makes the whole system useless.
>>
>>108963361
cuck license
>>
>>108963939
that is not what secureblue is secureblue is hardened Silverblue sliverblue is an atomic distro even the devs of secureblue admit it is less secure than qubes
>>
>>108963361
obviously virtualization is better
>>
QubeOS is a meme, OpenBSD all the way
>>
>>108966239 (me)
I mean, it does have it's uses of course, but 98% of times OpenBSD is the one to choose, other 2% is limited to whistleblowers and reporters endangering their lives, and in that case maybe tails works better for them
>>
If OpenBSD had better filesystem options I'd go for it.
The comfiness of ZFS usage is unmatched. In fact, a Qubes like implementation but based on ZFS would - for templates, upgrades, rollback, all natural.
>>
>>108963398
Yeah, and graphenos is a google's spyware, trust me bro
>>
>>108963361
Qubes OS would be better but the main issue with Qubes is that you can't use your GPU to offload anything in the Qubes. Everything has to be done in software so any kind of media is going to run badly. Unless someone with some experience with Qubes was to chime in here.
>>
>>108963361
OpenBSD if your use case is actually covered by OpenBSD. Every layer of administrative security adds more attack surface which can be turned against you.
>>
File: 1776922367835695.png (2.84 MB, 3420x2728)
2.84 MB PNG
>>108963361
OpenBSD is great for server infrastructure. It's what you have in front as an httpd usually

Qubes is for people who really need it like Greenwald or Snowden, or if you're actually in deep shit

I really don't even like Qubes all that much, I say use disposable whonix vm + tor browser with no javascript enabled that should do it
>>
>>108963361
The QubesOS is objectively better.

>>108963745
This is correct if you want a usable OS.

>>108963939
No it's not. Qubes is a virtual machine manager pretending to be a desktop OS. Secureblue is a real Linux distribution.
Secureblue is to desktop Linux what GrapheneOS is to Android, a hardened and secured version of the OS. Your grandma could use either Secureblue or GrapheneOS without learning anything new, but Qubes explicitly requires a more technical user.
>>
>>108963361
openbsd
>>
File: 1759804184387562.png (141 KB, 689x751)
141 KB PNG
>>108963361
welp
>>
File: 1750454130850980.png (836 KB, 1240x737)
836 KB PNG
>>108963361
https://forum.qubes-os.org/t/install-openbsd-in-qubes-os/
>>
>>108963361
not a pdf file so I just use windows like a normal person
somebody needs to check your hard drives



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.