News for hackers. Stuff that matters.
Re:Qubes OS: A reasonably secure operating system by snvzz on Sunday November 19, 2017 @12:28PM (#15734812)
>Could you clarify "Better choice"?

KVM is, like VMware, a Type 2 hypervisor. [1]

Xen is a proper Type 1 hypervisor.

[1] https://microkerneldude.wordpress.com/2010/10/14/much-ado-ab...

Re:Qubes OS: A reasonably secure operating system by aleden on Sunday November 19, 2017 @01:11PM (#15735038)
It should be noted that KVM supports many different archs, and it lives inside the mainline Linux kernel while VMware's kernel modules are out-of-tree. I think this fact is an important difference (also that qemu-system-* are open-source, while vmware is not).
Re:Qubes OS: A reasonably secure operating system by theossuary on Sunday November 19, 2017 @12:43PM (#15734912)
Why is a type 1 hypervisor instantly considered more secure though? I'd assume using Linux, instead of rolling your own code to interface with hardware, would make you more secure?
Re:Qubes OS: A reasonably secure operating system by snvzz on Sunday November 19, 2017 @01:24PM (#15735096)
In the Linux vs Xen example, the TCB is much bigger with Linux. The idea is to keep the TCB as small as possible, with an emphasis on restricting the code size that's actually running privileged.
Re:Qubes OS: A reasonably secure operating system by monocasa on Sunday November 19, 2017 @05:19PM (#15736268)
sel4's virtualization support make it a type 2 hypervisor. Akaros too, which IMO has the right model for virtualization with it's 'VM threads' concept. All 'type 2' really means is that the kernel directly supports running threads in ring 3 in addition to ring 0.

I guess it's your use of 'proper' that bugged me.