zlacker

>>danShu+(OP)
So imagine you have a separate slot in your desktop/laptop occupied by a secondary single board computer of sufficient power to run your banks website or other secure operations. Since you are going to use it to git push to import repos or move money you give two shits if it has much in the way of customization.

You hit a physical button and an internal kvm switches usb input and displayport out between primary and secondary machine. There is no shared clipboard or way for data to be intentionally be shared between machines and nothing to distinguish this setup from any other "secure" setup to disallow its use. It ticks the correct boxes to meet the described intent of the feature and unlike a secure environment one is obliged to use for everything would actually be more secure as you have no good reason to install a bunch of software or browse random websites on the slower secure environment.

>>michae+ig
You can try QubesOS, which does exactly this using virtual machines. Clipboard is not shared by default, you need to move the contents of the clipboard using yet another keystroke pair (so it's 4-salutes scheme: Ctrl-C, Ctrl-Shift-C, Ctrl-Shift-V, Ctrl-V to actually copy something between machines). App's windows are delineated with coloured borders which cannot be overridden from inside the VM.

There are major usability problems, mostly related to graphics (the protocol that forwards the windows is purposefully dumb and doesn't support 3D acceleration at all), but for things like browsing bank apps or even watching youtube it's enough.

>>throw_+O51
> the protocol that forwards the windows is purposefully dumb and doesn't support 3D acceleration at all

This is a major reason I haven't tried QubesOS yet. Thanks to Nvidia I've seen what happens when you run a desktop with a browser without hardware acceleration and it sucks. CPU cores get pegged with basic scrolling or video playback and power consumption is simply unreasonable.

Perhaps if I were a human rights activist or a journalist I would use it, but I'm not.