zlacker

>>feross+(OP)
The only practical security is security through isolation, like what Qubes OS provides. Security through correctness is impossible.

>>fsflov+Vp
Stupid question: how do you know your isolation is correct?

>>ttymck+Rr
There have been Qubes-breaking bugs in Xen before, and it wouldn't be surprising to see more.