Is it possible to convert the original post into a wiki?
Including some kind of summary would be great, don’t you think? I’m afraid that we will end up with a monster like the What would you like to see improved in Qubes OS? topic where information is lost in so many posts.
Draft of such a summary
- Xen-level compartmentalization/isolation:
- to control the software
- to protect myself from a hostile WAN and a browser (any browser) with organization-level cross-incentives
- … that already worked enough (within reason) out of the box
- slick
- clear
- Totally doable system/network admin scriptability/orchestration
- Pretty good integration with Whonix/Tor:
- torify arbitrary applications without fearing leaks
- Free, libre, open source (comment: Is Qubes OS free and open-source software?)
- doesn’t have a suspicious license agreement
- Helpful user community, active forum that celebrates useful ideas, people, and solutions.
- accessible and careful devs
- ability to set up offline qubes for storing secrets such as passwords and GPG keys
- Idea of templates, appVM, and dvm is brilliant:
- working with many Linux distros, Windows, it is fast and it takes up little disk space
- using cool tools that work only with older Debian/Ubuntu versions, without worrying about it
- installing apps without worrying about dependencies
- using many VPNs simultaneously.
- Disposable vms:
- for security
- The ability to create nuanced disposable templates to investigate and test with save so much prep work.
- excellent and very convenient forensic protection, thanks to the large fantastic community for guides.
- ability to run virtual machines with integration between VMs
- minimize any damage from Malware, phishing, and other unpleasant efforts
- the UI:
- a single app running in a VM can integrate well in the GUI domain, almost as a regular app in a regular distro
- VM-dependent description and window colors help to refrain from doing stupid things
- Isolating base OS from the network and letting only virtual vm’s to have network/internet.
- the possibility of attaching a webcam to a virtual machine and have it working out-of-the-box for video calls
- The security that allows a complex Windows 7 environment to still be used
- For testing, the creation of VM clones at a click, stopping to make disastrous tests expensive, with client/server environments on just one machine
- The peace of mind when doing things like going to dangerous websites or opening documents of doubtful origin.
- Having a modern software system showing, in teaching, where software development is / should be going nowadays.
- Tails-like amnesic behavior when wanted, but with full customization and the ability to install whatever apps
- And the flexibility to run any OS in isolated qubes, with strong security guarantees, is unmatched.
- The networking that gives absolute control (up to what sys-net is doing within itself) because each netvm is a router we can audit and monitor
- That networking allowed me to build complex systems using many VPNs, although it was possible on OpenBSD using multiple routing tables or Linux with ip rules, it was easier to use on Qubes OS
- in freelance/professional activity, being able to separate the systems used for each client and their VPN was a must
- to be able to
npm install ...to get work done and I don’t want to have to worry about getting infected everytime I need to do so. - separating applications into qubes allows better stability: when I’m “fidgeting”, installing or making changes in certain qubes (media, personal) it will never affect my work qubes.
- Qubes seems to be the only option which gives actual protection against digital fingerprinting:
- ability to run whatever apps without worrying that I will end up with identity stolen.
- make Youtube show me only the content I want. If I want to learn a skill I can create a vm for this topic. And Youtube will show me videos about this topic specifically