What's the best way to check if qubes is hacked?I

[fsflover]

More practical security for Qubes (and more realistic threat model)

I think it is time to make some necessary corrections to our threat model. As shaped by Joanna’s vision, Qubes is entirely focused on certain aspects on breach prevention, lacking any “plan B” (and speaking on prevention, even AppArmor for Whonix and gui-authorized sudo are not in the default configuration yet, and SELinux is mostly untested, because it was decided at once that PVM isolation is panacea). I would say, we are not really prepared for a situation when someone develops a working expl…

Intrustion Detectors in dom0: bad idea?

Continuing the discussion from Running AIDE in dom0: I’ve seen couple of times users talk about installing IDEs (Intrusion Detection Systems) in dom0 and I wanted to start a discussion on this to see people’s takes on it.