The importance of compartmentalization

[fsflover]

@stumpi

would a reproducible build or checksum checking have mitigated the software supply chain hack? If yes are there any efforts to achieve this in Xen?

Would be a good question for this discussion: https://forum.qubes-os.org/t/how-can-we-ever-trust-our-hardware-supply-chain-attack/2846.

@fiftyfourthparallel

but I think both vendor trust and BIOS or boot security are interesting topics for the new place

Since you show the interest, I created a thread for that: .Hardware brands which you trust to run Qubes.