What's the best way to check if qubes is hacked?I

[naverone]

@anon42456682

but how do you confirm or know you are hacked in the best way?

the best way i could think of is if our templates had some kinda HASH/signature that dom0 could compare at boot. this would ensure the templates are unmodified and trustworthy. what do you think @fsflover ?

@More practical security for Qubes (and more realistic threat model)

I think it is time to make some necessary corrections to our threat model. As shaped by Joanna’s vision, Qubes is entirely focused on certain aspects on breach prevention, lacking any “plan B” (and speaking on prevention, even AppArmor for Whonix and gui-authorized sudo are not in the default configuration yet, and SELinux is mostly untested, because it was decided at once that PVM isolation is panacea).

I agree with you. i would like things to harden up. passwordless sudo never sat right with me.