I posted a few days ago as Qubes7957 about high threat model and potentially compromised qubes laptop and appreciate the responses I got - someone recommended Heads and Nova Custom. I went back yesterday or the day before to ask a follow up question and could not log in/credentials invalid. Plus I can’t find my post. If I somehow violated Forum rules please let me know. If not, pretty clear confirmation that my qubes laptop is compromised -since my forum credentials were in a vault in Keepassxc (prior post mentioned the sha256 commands run on my database that I did not run).
If not, here’s my follow up question.
My understanding is that Heads would alert me re: a firmware change or attempted change but does not protect the computer against compromise. If I had a Heads laptop that did get compromised, would I be able to reinstall Qubes fully and safely as a fresh start? Perplexity tells me that just reinstalling Qubes on this Thinkpad (no Heads) does not guarantee that the malware/compromise won’t persist on the new install.
Also, the forum “your topic is similar to…” is hugely helpful, especially the post about potential router compromise. Makes me wonder if I should be using Whonix/Tor (never used either) to access email rather than firefox in a dedicated disposable email dvm. Would that help with possibly compromised internet access?
Thank you for the help and if my last post violated Forum rules - I apologize!