QSB-116: Multiple Xen issues (XSA-500, XSA-505, XSA-506, XSA-507)

[fsflover]

@oversight

Is it so rare because there are so little exploitable bugs or is it so rare because Qubes/Xen is not as popular

Are we safe because we’re a relatively tiny, niche OS?

Imagine a big tech company investing huge into Qubes development – and contributes everything back to upstream. They make it manageable for an average enterprise admin (yes, this includes the whole Win10 guest management stack) and totally usable for an average enterprise user. So, every security-savvy company starts using Qubes as a default workstation. At the end of the day, all TAO / CIA / whatever TLA have a dedicated Qubes task force. Hacking Qubes becomes a holy grail of IC. Would the …