logoalt Hacker News

mustache_kimonolast Tuesday at 6:44 PM1 replyview on HN

> there are many of us who are very thankful for them.

Why? Can you explain, in light of the article, and for those of us who may not be familiar with qubes-mirage-firewall, why?


Replies

vigilanslast Tuesday at 8:27 PM

In Qubes you use VMs to separate your banking environment from the one where you pull npm dependencies and the one where you open untrusted PDFs.

Networking also happens in its own VM, and you can have multiple VMs dedicated to networking.

Much lower memory footprint running mirage firewall, and an attack surface orders of magnitude smaller (compared to a VM running a Linux distribution purely for networking).