This OS doesn't care if you get hacked...

[@Plexdet]

“The malware will never escape my virtual machine”

[@TheFiretiger20]

right ? ....right?????

[@prathamshenoy9840]

@@TheFiretiger20 yep. can't thank them enough for this genius idea. finally freedom from getting hacked like crazy!

[@zacharymontgomery9328]

Spectre looms in the distance

[@Orneyrocks1609]

It will not if you isolate all files linked to it.

[@thatchannel3032]

Famous last words

[@hiperion_1416]

"every software can be exploited except my virtualization software"

[@Anteksanteri]

This is actually fairly true. It's similar to trying to break out of the matrix.

[@thecomposerchanginggames5250]

Yeah. It's theoretically possible and has been done once, but it's like trying to hack your own matrix. The vast, vast majority of malware will just get stuck.

[@zsmyley]

Funfact, last time I tried to set up a windows VM inside qubes the feature set was very limited due to security vulnerabilities in the xen drivers they use.

[@core36]

@@Anteksanteri the host and the vm are essentially on the same network

[@WaitmeuC]

How

[@QutalToddHoward]

I'm usually skeptical about men on the internet telling me about os' but he has a very trustworthy beard.

[@xIJudaS]

Todd you’re lying again

[@moister3727]

Todd, I know you are hiding somewhere I will find you

[@Apple_Beshy]

And btw he is a scummy who disguise his tutorial to lure 'illiterate tech people' to use his products, he shamelessly said that his website is much better than TOR or Tails when browsing dark web.. That's so disgusting he is tricking these people to pay for his website with glorified vpn.

[@theyoungcoder]

@@Apple_BeshyListen, that might be one thing but his videos are good and his guides got me started in my cybersec journey so

[@aycoded7840]

@@Apple_Beshy Network chuck?

[@ImARealHumanPerson]

My favorite part about Qubes is not using it.

[@clarkkentgwapo1]

😂😂

[@bboynitro]

wh

[@___idk]

Lol

[@chrisknoblock]

CAN'T GET HACKED IF I DON'T INTERNET!!!!

[@BeanzMan]

Damn bro that’s deep

[@KevintónBlack]

That's called the "Zero Trust" policy. That's how proactive threat detection works.

[@STCatchMeTRACjRo]

here is the question.. how can you trust the threat detection works? and how can you trust the validation method of the threat detection to actually work? and how can you trust the validation of the validation method that validates the threat detection? and how can you trust the validation of the validation that validates the validation method that validates the threat detection?

[@christophrechtlehner]

How exactly are you detecting any threat with this, let alone proactive

[@_KrakenDev]

​@@christophrechtlehneryou are not. This os is purely defensive, not offensive. Although zero trust is used as a reference when detecting threats, all it means is you don't trust ANY software. It's not THE method used, just a model for saying "don't assume it's safe". Anti-viruses are both proactive and retroactive. Qubes is neither.

[@fatlip8315]

​@@STCatchMeTRACjRoI got the answer to validate your fears, you can't - unless you do-it-yourself, and understand what your doing. You can use other people's code/work, you can join the products research and development and learn how to do it yourself, as well as share with these teams, and so then you'll be in the know about what's going on and where the projects are going, and if your doing it yourself, you can run with the crowd and stampede into the future, or you can be like pacman in the movies colors when he learns how to walk down, and f*ck all of them.

[@Fredrick-d5c]

Undercover coffee, ceramics and pottery boss

[@rohitram9701]

Great😂😂😂😂❤

[@dnlplayz4284]

I mean... He likes coffee :)

[@erekthus]

Everything is a minic

[@Fredrick-d5c]

Reordering medical supplies to conflict zones in MENA region. Russia and Ukraine.

[@TheMostOrdinaryMan]

I think tails is still the best OS as it boots off a usb, runs on memory and deletes everything when you log off. Neat though.

[@aurelienlux]

You can run Tails under Qubes

[@ThompYT]

yeah just run tails in qubes then? Problem is tails is purely temporary while qubes allows you to actually use the computer even after a power outage

[@princessLilytea]

​@@akemihibiki463afik: tails runs all your internet traffic over tor, which will encrypt all your requests and hide your ip adress

[@wwtapsable]

they are both good security OS, but they use completely different security paradigms for different purposes, tails is not very secure if you start loading it up with your normal software, it is meant to do a few tasks and only those tasks without leaking info online, the "protection" from malware and hackers is a tiny attack surface due to the amount of time that it is expected to be running before reset, the and the specifically chosen software that should be run (if you go to install new software on it, this type of security can be compromised) Qubes is good for running arbitrary software and minimizing the effects of an attack if some of that software is compromised. TD;DR: Tails is a bunker, Qubes is a public building with strictly enforced security protocols. while a bunker might be safer, you are limited in what you can do.

[@TheMostOrdinaryMan]

Love this community. I'll definitely try out using tails in Qubes, get the best of both.

[@gzoechi]

Quite an overselling. Qubes is just XEN VMs properly set up with some additional tooling for security and convenience. I used it on my main computer for several years with a few Debian and Windows VMs. If security is a concern I'd definitely suggest it, otherwise it can be a bit cumbersome at times.

[@JohnSmith-yz7uh]

You also have to restrict yourself from mixing different aspects of your life within the same browser/container/etc. If you would access work stuff in the same session as private stuff, it can be correlated.

[@HowToEverything1]

a bit qubersome *ba dm tss*

[@revisionconsistency]

Bro your profile name is a dot😂 Are you software architect?

[@gzoechi]

@@revisionconsistency Thanks for the hint. Seems to be something new on YT. I always had a handle but now I had to explicitly set one.

[@revisionconsistency]

@@gzoechi 😂❤️

[@arstgkneio]

an interesting feature in Qubes is that you have to manually mount USB devices (you can make an exception for mice and keyboards). It’s a good middle ground between disabling USB ports entirely and letting any random USB device have full reign of your system as soon as you plug it in.

[@mepret]

Well yeah, and if you add a USB device in your host PC whith a mallware which will give nasty commands to your Qubes instances? :)

[@UNcommonSenseAUS]

Exceptions for hid isn't a solution.

[@palmberry5576]

@@UNcommonSenseAUSyeah, i feel like that’s the opposite of what you should be doing lol. “Yeah I just added a security bypass for the devices that can execute arbitrary inputs, I’m sure it will be fine”

[@UNcommonSenseAUS]

@@palmberry5576 lol I know rite...

[@staff4226]

​@@palmberry5576I'm pretty sure the exception is for one of each device to make sure you're able to actually use the OS. It probably doesn't allow just anything that labels itself "keyboard", and when you finish setting up your keyboard and mouse you can turn the setting off.

[@udbruddistribucion6347]

The way xorg is used in qube os is really cool. Data is copied from the vm to the host so the vm can't even see applications from other vm's. The rpc is also cool so you're able to have your ssh agent running on an isolated vm.

[@blender_wiki]

Is not a paranoia is just how decent security entreprise system must works. In our bussines we don't have any direct connection to internet on our Workstations. email/browser/etc. open on a dedicated VM that is hosted in the dedicated server, any file we download are automatically scanned by the server and only then we can open/copy on our computers trough the local network. Moreover the Clipboard work only one way for logical security mesure. If you want a similar level of protection Qos is a very good solution and even better for some case scenarios.

[@phr3ui559]

ok

[@GreatTaiwan]

Quality of service? What’s Qos

[@vendetta.02]

​@@GreatTaiwanqubesos

[@trailblazer_chris]

Double charactered people's finally got their virtual self😅

[@thegamechanger9124]

😂😂😂

[@gergemall]

Fascinating

[@pirateluffy01]

I am soo gonna use it

[@ros9764]

Gonna isolate my personality disorder by using multiple qubes

[@ManOnDaMoon-rh4gq]

Had to comment .. In the past 10+ years, I’ve watched a lotttt of KZbin videos and I have to say yours are some of the best I’ve seen... awesome content and great job on these videos.

[@tumbley1557]

It's crazy how i end up saving every one of your videos for later use. Very useful!

[@block_place1232]

The random mario maker sound effect caught me of guard

[@AARONBATTERY]

Same

[@agnoailles]

Bro, I simply LOVE the way you share content, I almost never have enough time anymore to see you. But every now and again I allow myself to get a zip of your humor. It just NEVER fails. You mean a lot to many good folks. Please, allow yourself to feel proud if you ever read this! ❤😂🎉😊

[@therevoman]

Dude, I love how calm and relaxed you’ve become again! Keep up whatever you are doing.

[@GilchristMcGill]

"A reasonably secure OS" lol 😂😂😂

[@DoFliesCallUsWalks]

reasonably

[@GilchristMcGill]

@@DoFliesCallUsWalks oops

[@DoFliesCallUsWalks]

@@GilchristMcGill 😁

[@w花b]

​@@DoFliesCallUsWalkshuh😮

[@Deinz1024]

@@DoFliesCallUsWalksHuell is happy, yay

[@joshualoewen351]

It does matter if the malware grabs any passwords written on that virtual pc, also it could shortcut or attach itsselves to other files thats spread on it too.

[@rohetchowdhury2452]

I really like this video. The background music went really well with your style of giving info. I recommend using it more often with your shorts

[@jakeells66]

Makes me wish I could just go back to the day I started using the Internet for the first time and somehow use cubes back then.

[@lifeunderthemic]

Brought to you by your trusting, caring, loving DOD..

[@clintlawrence012]

Website: "you got hacked" Qube: "i dont care" Website; "your gonna get your computer controlled" Qube: *"I DONT CARE"*

[@milescarter7803]

2 problems: 1) Windows is already converting to this technology. 2) Speculative execution and side channel attacks are working to circumvent Virtualization isolation. Why? Because servers run virtualized apps. Banking servers, etc.

[@sietze.temporary]

I think OpenBSD is also quite secure given the way they keep the base system safe...

[@rayanahmad6901]

? What is that ? I prefer having multiple USB drives with live images, containing tools, required by me, one of them being a file explorer, another being audio player, and so on

[@rayanahmad6901]

Who needs an os when u got USB drives

[@Misterthirtysix]

Great short man! You formed an anchor for long form; I like it

[@brucen83]

Before docker and virtual environments we had a similar idea in our company but designing and developing it in isolation led to giving up on the idea.

[@davidrussell8795]

So,bring it forth!

[@Splash滴]

The zero trust mentality mixed in with insane RAM.

[@Niepokonany666]

The most safe method is running virtual machine on android using some app which makes you impossible for now to infect.

[@StarfoxHUN]

I can imagine using it as a virtual Computer running from my 'everyday' os, using it only for super secure web surfing. I wonder if it still secure used like that.

[@likemau5552]

In this case it is only as safe as your main everyday OS

[@3Gbroyota]

Honestly thats great opsec to an IT professional. In the day and age where our information is sold its kinda giving the middle finger to google and Microsoft but rather than manualy setting up individual vm's it does it for you.

[@pqnet84]

and then you remember that you want to play games, and they need direct hardware access to not choke your FPS and they need to run their rootkit for cheat detection, so the gaming you is basically an admin of all other you. Industry does not want you to be able to do that

[@bcz1337]

This is not exactly true. In Qubes OS you can just create a Windows HVM qube and attach your GPU into it. You will be able to play almost of the games without much performance issues. But those games with anti cheat that blocks Virtual Machines, e.g Valorant and Rainbow Six Siege, you will not be able to play. So isn't perfect but not bad at all.

[@ivanlaplante]

​@@bcz1337Dual boot with a Windows drive for gaming with anti-cheating and a Qubes drive with proper isolation for everything else?

[@pixelfairy]

​@@ivanlaplanteproblem with most versions of dual boot is then Windows can write over your qubes disk. Some laptops and desktops make it easy to physically swap out disks, which solves this. You could also boot qubes from USB, leaving the windows disk in place. But most laptops only have one USB bus, so you'll probably lose the USB qube benefits.

[@bcz1337]

​@@ivanlaplante Dual boot Qubes with any other OS just breaks the entire purpose of their security schema. Just read the Qubes's docs.

[@ivanlaplante]

@@bcz1337 i might be misunderstanding how dual boot work, will look both

[@dylanwoodard5378]

I love that we still call it “spinning up” a virtual machine. Rarely am I going to want anything to do with an operating system that runs on a shingled drive, but I still say that I “spun up” that virtual machine that’s running on my SSD.

[@suliacbouye]

And making ur pc suffer if you open to much qubes (if it is not powerful enough)

[@DalekSec714]

Similar to chrome os which runs apps in a sandbox

[@DiamondDF]

Background song / music: Dylan Sitts - Mirror Moving

[@thebasketballhistorian3291]

Me at the beginning of the video = "How is this different from virtualization?" Him later in the video = "This is virtualization." Me = "Okay."

[@halfblood_drag0n]

so we out here making virtual box an os now

[@Cloud67TR]

the heaviest linux distro

[@Dr.Frogerston]

The Mario Maker sfx scared me lol

[@haffey2]

Mario Paint

[@abetterfuture4787]

"Your cube is going to get hacked, but it won't matter" No, it will definitely matter when they get your bank account info along with everything else they need for identity theft. It will definitely mitigate the damage done, but cannot eliminate the damage done.

[@martinmatin6275]

qubes more like cubes 🗣🔥🔥🔥🔥

[@boardsontt1756]

Pubes

[@orren6999]

@@boardsontt1756hehe pubes

[@Ниггерфиш]

Lubes

[@DoFliesCallUsWalks]

bubes(boobs)

[@martinmatin6275]

@@Ниггерфиш Rubes🗣🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥

[@GoogelDeepMind2024]

Trying to set up "QUBES OS" is like trying to set up a hot date for a Friday night!

[@exohive5608]

Like a specialized container?

[@renarsvallitis6209]

Yes

[@mwmm]

No, containers use their host system kernel to do what they do which means windows can't run in a container. This runs on virtualization which is typically slower but far more secure than containers.

[@VargVinter]

@@mwmm not exactly. You run Docker on a VM and run WCOW. Done, fully operational Windows 10 or 11 on VM- container. The Kernel will be provided by the VM not the host machine.

[@mwmm]

@@VargVinter that's still running on a virtualized host since that's essentially what a VM does. If you're running a windows host, it supports running a windows docker container, if you're running a Linux host it supports running a Linux host only. WSL2 is still essentially a VM within windows of which you can run Linux containers within. You're going to get severe performance hits by doing this and it isn't the same as running natively on a bare metal host kernel. This doesn't change the fact that containers can only run what's on the host kernel, be it a virtualized or bare metal host.

[@wolfbad512]

Just don't go around testing viruses and malware with it many can break through your from Virtual machine to your main system

[@MVCuber]

I thought it was called "environment" like in Python

[@lennyescott]

They've got different methods of privacy but TailsOS is pretty secure

[@staff4226]

Tails is for privacy, qubes is for security.

[@MrPropper69]

can't wait for SonicOS!

[@HyperMTrader369]

Good short brother very eye catching !

[@msf_recursion]

Tails has entered the chat

[@camwha5904]

Run it in a Qube

[@raskolnikov3799]

​@@camwha5904that would be a mistake, as you'd lose out on basically the whole point of TailsOS, being ram-based. Whonix is a better idea to use in a qube.

[@MistiMoan]

Need a mobile android like system for this

[@dritterregenschirm2324]

TempleOS is more secure

[@AndGoatz04]

Oh no! My box has a hole in it! [Throws it out for a new one]

[@BorislavMitsov]

nice background beat. link or something, please!

[@Nobodyspecial402]

Making a comment here in case someone else can answer

[@ValentinSW]

@@Nobodyspecial402 5 months late but: Dylan Sitts - Mirror Moving

[@Misfit.Profit]

This has been a thing for atleast the last 20 years I've been programming and probably one of the first tools programmers useD to try and break the box (Virtual P.C.)

[@kallixo]

"secure os" *shows chromium*

[@arcticfox037]

When?

[@arcticfox037]

When?

[@blbezcc]

​@@arcticfox037on the thumbnail

[@CosmicChew]

Doesn’t matter. Qubes just doesn’t care. The cubes do not read outside of their container. So, If you want you can spin up a cube with chromium and just give Google false data by searching random nonsense.

[@AltonV]

@@blbezcc it's because the thumbnail is a frame from the video. I haven't seen many shorts (if any) that have a custom thumbnail.

[@CJManning86]

This is a form of vitualization... like you said. However, this is most closely resembling things like a container system. Similar to what AWS uses, and even Azure and other clouds now

[@wesss9353]

Honeypot?

[@durschfalltv7505]

Like anything technology.

[@Thedude897]

Same vides I got. I'm telling you the feds use these guys to promote vulnerabilities. Tails is the top dog on a yagi

[@BlankVsudo]

​@@Thedude897wdym?

[@raskolnikov3799]

​@@Thedude897 that's ridiculous. The Qubes and Tails teams are good friends and share code, and QubesOS is open source.

[@svenmify]

Besides the security / paranoia aspect, it just makes a lot of sense to divide your computer into compartments. I usually have like 5-10 projects open in vs code, files for all of them in different apps (photoshop, unity, xd, etc etc), plus 100s of tabs pertaining to stuff for each project. It’s a huge pain, and I can obviously spin up VMs on my Mac for each project, but it’s baffling to me that there’s not tighter OS integration for that. How do people generally deal with managing multiple projects? Can’t imagine anyone closes all files for one project whenever they need to briefly switch to another one.

[@punishedbarca761]

Neovim + tmux :D join the dark side

[@neilssterling5122]

Imagine having 128gb of memory just lying around for you to use all the apps you need.

[@everyhandletaken]

Why does it always make me imagine a cluster of Nintendo GameCubes, where I hear Qubes mentioned.

[@PersChnel886]

Exist a difference between security and privacy. That is the key at that OS, by default it is more oriented to security, not privacy.

[@professordey]

Except that virtualised hardware is one of the most common vulnerabilities in priviledge escalation/cross-container memory attacks because you're sharing physical hardware. at a certain point, just have seperate computers, most tech workplaces issue a work laptop anyway for this exact reason, to stop you putting work stuff on devices you use for personal stuff thats more likely to get viruses etc

[@AlFei_0]

You know what ignorance and over-caution have in common? Limitation and vulnerability.

[@Neon_Excel]

This is actually a cool idea. the persona part.

[@RepublicOfAnimators]

Most safest OS in the world is DOS

[@Wranorn]

Never seen someone get so excited about Virtual Machines.

[@athiyo2359]

It is also the same OS used by Edward Snowden for Whistleblowing about US Govt

[@theblackbaron4119]

I usually use a virtual machine inside a virtual machine. Most malware doesn't manage to escape one VM.

[@JWProhosting]

This is how the android is works also. Each app is encapsulated with it's own virtual machine.

[@Iamnotrandom565]

i had a stroke reading the first part pls fix yo damn grammar

[@Diviance]

The most secure OS in the world... Just isn't connected to a network.

[@gokulraja2006]

I used this notorious os for 3 years. Its based on "compartmentalization by virtualizing". Every program runs in an guest OS. Its really pain to set up.

[@DEFTERICE9275]

BRO IS TRYING TO SAY THAT BLUESTACKS IS SAFE 💀

[@NootNooot]

If you’re targeted like that. The hacker will break out of the VM

[@phoenixwhiler943]

From the way he explained it, it looks like each time you set up a cube it's a new cube?

[@NootNooot]

@@phoenixwhiler943 it's just a virtual machine, he said it himself. just a second of online time is needed if you're targeted badly enough like that

[@staff4226]

That's not going to happen unless user is dumb. QubesOS is used by even Edward Snowden, the system which runs the VMs is also pretty secure.

[@devoosdude9809]

0 Days escape from VM vulnerabilities: casually exist Chuck: vm - security

[@massimo79mmm]

qube: i’m the most secure os z/os: hold my beer

[@skeleton_craftGaming]

Radio is legitimately one of the most monitored ways of communication.

[@Rainy_Day12234]

The United States needs a internet bill of rights protecting personal information and privacy. And everyone should want this.

[@micalamb6144]

Tecnically, after the snowden exposing everything, this are not maded? I from other country, so i can't say it myself

[@jessewatson3187]

When it comes to cybersecurity, it’s never “if” it’s always “when”

[@jawanen]

I use qubes on a computer i Use on daily basis. And important thing that was not said in this video that the storage that qubes uses is very separated and you can separated it even More. Its propably possible for malware to go from qube to another but dom0 (the most privilidged level) has completely own storage block

[@staff4226]

Fun fact, Edward Snowden said he uses qubes

[@Second_Splitter]

They’re now finding out about VMs

[@kaitlynethylia]

im not worried about hackers, im worried about the monopolistic and privacy invasive company whose software we have to use

[@jakubsuchenek]

As SysAdmin: it's not paranoid, Windows already has this function, but disabled by default.

[@insizei]

The most secure OS in the world is Nokia's Symbian...

[@ArjunArvind208]

Thanks

[@endualva]

Good way to describe a Virtual Machine :)

[@Triro]

Cubes just assuems all software is malware. Meanwhile just completely trusts the virtualization.

[@flandersnatch2285]

There is a fine line between safety and gaslighting the rest of humanity

[@Somebodythatiusedtoknoww]

Yes virtualization will makes your computer more secure but it will severely reduce performance

[@davidsalvador8989]

Paranoid for thinking your going to be spied on? : Ed Snowden has entered chat.... "Um Actually."

[@INeedlessI]

So Cubes is a honeypot like ANOM cellphones were. Thanks for letting us know

[@pfikurum]

Qubes is just like taking care of a giant beast. I need to have a higher-spec computer for that.

[@38c_]

I don’t see how this is any more private than a regular virtual machine. Even if the OS is plastered with security checks etc, your ISP can still see everything you do.

[@AltonV]

You can route specific cubes through a vpn

[@38c_]

@@AltonV emphasis on “can”. It seems to not be a primary feature. And anyways you can just as well run a VPN through Chrome.

[@tangodown2721]

You misundetstand what Qubes is. Qubes is a SECURE operating system not a privacy os. You can use it as a privacy os but you need to set it up that way yourself.

[@38c_]

@@tangodown2721 Hmm, good point. I suppose I just don’t see the difference between Qubes and VirtualBox.

[@j-dev2605]

ram usage : PC on fire

[@DiscoveringDestination_]

ok here me out open a cube then open another cube in that cube

[@ronster.]

when you were basically just describing VMs to me i was basically like "dude youre just describing VMs to me"

[@IlluminatusVII]

True encryption is actually illegal, the government by law is always allowed a backdoor.

[@davidrussell8795]

Prove it!😮

[@SpaghettiRealm]

Ok, a years ago we just booted to a live linux from a usb that’s set

[@BleachBoy858]

This is just how ChromeOS operates on Chromebook with sandboxing, data encryption, and multi-user sign-in

[@krislynn5965]

I mean, making a DISA STIGd locked down linked clone or something equivalent in nature that will be destroyed and rebuilt from an isolated "master" image works just as well and is just as secure. You could use VMware, Citrix, Oracle, AWS, Azure, or many others to achieve the exact same result.

[@УлыбышеваАлександра]

So it's just a virtual box like many other virtual boxes - with all features and disadvantages of virtual boxes included.