Re:Qubes OS: A reasonably secure operating system
by theossuary on Sunday November 19, 2017 @12:43PM
(#15734912)
Why is a type 1 hypervisor instantly considered more secure though? I'd assume using Linux, instead of rolling your own code to interface with hardware, would make you more secure?
[ Parent
| on HN ]
Re:Qubes OS: A reasonably secure operating system
by snvzz on Sunday November 19, 2017 @01:24PM
(#15735096)
In the Linux vs Xen example, the TCB is much bigger with Linux.
The idea is to keep the TCB as small as possible, with an emphasis on restricting the code size that's actually running privileged.