How anonymous is Qubes + Whonix out of the box, and how to harden it?

[ppc]

What should I do after installing qubes?

Qubes aims to ship with secure defaults, so no general hardening should be necessary (unlike an operating system that was not designed primarily with security in mind). Anything not done by default is probably something that depends on the user’s unique situation (use case, threat model, etc.). In other words, if there’s something that all users should do as soon as they install Qubes OS in order to harden the system, then we (the project) should simply make that the default and ship Qubes that …

if you want to, there not much thing you can do since it already secure by defaults

Hardening Qubes OS?

I was wondering whether anyone has any tips on how to further ‘harden’ Qubes OS. I am currently running all my sys-* as disposable vm’s. These sys* vm’s are all based on fedora-33-minimal. I also use 1 appvm/standalone per program. Any further tips would be appreciated!

[qubes-users] Hardening Guide for Paranoid Noobs?

I was reminded about qubes hardening that Chris L has been working on and also noticed that Patrick/Whonix is now basing whonix on thier kicksecure distro and was trying (not so successfully) to absorb all of this. I got the impression that Chris's work wouldnt jive so well with kicksecure (fair enough, can just use it on non-whoinx setups) but wasnt sure. Also there is the idea of DVM sys-* (net/usb/firewall/etc) vms sounded like they would add an extra layer of security, maybe based on centos …

What should I do after installing qubes?

How I can hardening qubes .

WHONIX & OS Hardening

Hello, I recently went through thr whonix system and OS hardening checklist. I wanted to know, for someone who holds sensitive information, will it be necessary to check all the points in the checklist( OS, Advance, Host, Whonix hardening lists)

Easy hardening for beginners

I know this has been asked before (a lot!) but I don’t think it’s been asked like this. What are some ways that a beginner can harden their system? For example, using the security-testing repositories isn’t too difficult but using openbsd as a netvm is. Sorry if this has been asked before!

and more