Security using qvm+windows?

fsflover · August 3, 2022, 3:27pm

If you use Qubes from the USB device and sometimes boot your main system from the hard drive, it might be equivalent to multibooting:

github.com

Qubes-Community/Contents/blob/master/docs/configuration/multiboot.md


Multibooting Qubes 
========================================

Introduction
---------------------

You should think carefully before dual booting Qubes on your box.
Read the [guidelines](https://www.qubes-os.org/doc/security-guidelines) carefully.

One problem is that when you dual or multiboot, even if you are using
encryption on your Qubes installation, /boot is still unprotected and
could be maliciously modified by the other OS, possibly leading to Qubes
itself being maliciously modified.

The other problem is firmware security - for example the other system
could infect the BIOS firmware, which might enable compromise or spying on
the Qubes system.

You can use [Anti Evil Maid](https://www.qubes-os.org/doc/anti-evil-maid/), which would inform

This file has been truncated. show original

Also, you don’t have a sys-usb, so you are not protected from malicious USB devices in this case.