Hello, everyone. I store the data obtained in Qubes directly on Qubes. However, I don’t know if Qubes is suitable for data storage.
Therefore, they are looking for secure ways to store data. Between password-protected HDD storage and Qubes, which is more suitable for data storage? In this case, the scenario you anticipate might be a brute-force attack on passwords, or a physical device being disassembled and only the internal data is extracted.
I am an amateur in this field. I’d appreciate any advice.
Thank you both very much.
Since my native language is not English, I didn’t understand the expression alder86 quite a bit, so let me confirm if my understanding was correct.
｛Well, Qubes is a OS and you try to throw it into a fight ring with just an encrypted HDD.｝
＜ In other words, Qubes OS is still an OS and shouldn’t be compared to encrypted HDDs by the same standards, right?
｛Pick whatever HDD encryption setup you deem secure, put it on a partition along side with Qubes and just mount it.｝
＜ In other words, since Qubes is still an operating system, the security standards for HDDs are low, so you need to add security software to Qubes, right?
I have two questions. I asked about this in another thread, but I’ve heard about the idea of putting [Vera crypt] into Qubes. Do you think that’s a good idea?
Another question is, is it better to install security software on an HDD with Qubes installed, rather than just a regular HDD? Is it dangerous to set a password or install security software on a simple HDD?
As an OS, Qubes is a collection of tools: the default tools for managing the storage are already reasonably secure. You need to define your threat model before considering other options.
Should we merge the two topics?
Same here, what’s your threat model? What do you mean by “installing software”? “setting a password”?
Edit: I forgot to answer the original questions:
It is. If you are an “amateur”, your best option is to follow the docs:
The default installation encrypt your drive with Luks.
An external LUKS-encrypted drive is secure. Necessary, even. You dont have preserved data if it isnt backed up in 3 locations, on 2 different mediums, with 1 offsite
Qubes is also good & secure, but I’m not betting 5 years of history that the hardware is infallible, or a bad update wont corrupt the system, etc
Thank you all for your advice. Also, let me confirm and ask some questions. If my understanding is different, please let me know.
Is the encryption system {Luks} the password you set to access Qubes at the very beginning when installing it? I didn’t know about Luks, so I did a bit of research and found out that it’s the security you set up first when installing the Linux system.
If that’s the case, then I’ve already set a password. I once saw a thread suggesting that individual files and Qube itself should be secured. Is Luks’ security enough for Qubes alone? Also, as Clammy said, if you do a backup, will Luks be taken over?
From the questions you ask it seems to me Qubes is not for you - at least not yet. If you are trying to learn by starting from the university, you will only get more confused.
I used to think Qubes’s default security wasn’t enough, but after listening to everyone’s advice, I realized Qubes’s security is much better than I imagined. From now on, I plan to back up multiple Qubes files and use Qubes as a data storage tool.
