zlacker

>>feross+(OP)
The only practical security is security through isolation, like what Qubes OS provides. Security through correctness is impossible.

>>fsflov+Vp
With Qubes you are depending on the correctness of the VM and whatever hardware it is running on. Modern chips are really complex.

The only perfectly secure computer is one that is off. Security is always about probabilities and trade offs. As you approach perfection cost approaches infinity. It’s similar to adding “nines” to your uptime.

A good security policy balances cost with security and also has plans in place for what to do if security is compromised.

>>api+5J
More security nihilism.