Is there value in template compartmentalization for advanced threat models?

[bored]

This was discussed already. Search for Qubes fingerprinting.

Beating Device Fingerprinting?

Assuming a browser escape (a lot, but humor me), one concern I’ve pondered is that from day 1 of installation, template root volumes begin to diverge across the user base as portions of the root filesystem become a de facto “local cookie” for any bad process that can query the filesystem and communicate to a CNC server. This could lead to correlation of different personas that utilize the same template in different VMs either at the same time or on staggered order. Contents of root such as log…