From 05eec9bc47e3a4f53c0b83845559a5f4da75ffa6 Mon Sep 17 00:00:00 2001 From: prism_breaker Date: Tue, 17 Dec 2024 12:57:44 +0000 Subject: [PATCH] Fixed some typo, linked two tutorials --- opsec/qubesos/index.html | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/opsec/qubesos/index.html b/opsec/qubesos/index.html index 871c1a1..354062e 100644 --- a/opsec/qubesos/index.html +++ b/opsec/qubesos/index.html @@ -64,7 +64,7 @@

Qubes OS guide

Official site of Qubes OS https://www.qubes-os.org

When you land into this tutorial, I assume you already have some Linux experience, if not this might not be suitable for you, since Qubes OS is not very user friendly. I recommend you to try some normal Linux distribution first How to Install Linux as a beginner

-

Qubes OS is a very cutting edge OS that uses virtualization everywhere to compartmentalize your digital life. It is technically not a Linux distribution, it is built on Xen which is a type 1 hypervisor that runs bare metal, https://en.wikipedia.org/wiki/Xen

+

Qubes OS is a very cutting edge OS that uses virtualization everywhere to compartmentalize your digital life. It is technically not a Linux distribution, it is built on Xen which is a type 1 hypervisor that runs on bare metal, https://en.wikipedia.org/wiki/Xen

First you have Xen hypervisor booted at startup, then you get separate VM for all of your activities. Because all of your activities are separated by VM, one of them get hacked will not compromise the security of your entire system. It is like manage your personal pc like a server, that is why Qubes OS is a highly secure OS if used correctly

If you want to dive into the tech details and concepts about Qubes, official document is the best place https://www.qubes-os.org/intro/

@@ -80,14 +80,14 @@

Comparison

Why you should use Qubes OS instead of xyz config I use?

1.Easier network configuration

-

Qubes OS is designed to have a basket of differnt VMs with different trust level, and has a very easy menu in GUI method to manage the network of these VMs. Qubes OS also has built-in firewall function to stop unexpected leaks. In short, it is less likely for you to make mistakes in Qubes

+

Qubes OS is designed to have a basket of differnt VMs with different trust level, and has a very easy menu in GUI to manage the network of these VMs. Qubes OS also has built-in firewall function to stop unexpected leaks. In short, it is less likely for you to make mistakes in Qubes

For example if you want to have many different network configs like below link to satisfy your different online identities, Qubes OS is the right tool.

Theories about building up your online identites. Check this theory about online identities, with Qubes OS you can easily build up chains of vm for doing whatever you want, for example different combination of vpn/proxy/tor

A image that shows Qubes OS with different vm for different functions and identities

2.Integrated Whonix

-

Qubes OS integrate whonix gateway and workstation by default, tor browser works out of the box. You can also use whonix gateway to torrify applications that do not support tor and it is leak proof. You can achieve all of these with some clicks of buttons, and no complicated iptables needed

+

Qubes OS integrate whonix gateway and workstation by default, thus tor browser works out of the box. You can also use whonix gateway to torrify applications that do not support tor be assured it is leak proof. You can achieve all of these with some clicks of buttons, and no complicated iptables needed

For learning what is whonix https://www.whonix.org/wiki/FAQ

3.Superior safety

Xen is a hypervisor that has a much smaller code than vmware/virtual box/kvm, it is possible to read and audit the entire code base. Besides qubes OS also put networking and usb service stack into VM, this feature greatly increases your host OS security from malicious network and usb. The days when you just plugin a bad usb into your computer and it booms are gone!

@@ -175,9 +175,10 @@ $ sudo dd if=file_name.iso of=/dev/sda status=progress

These configs in most situation do not need to be changed, however if you are using wired connection you can make sys-net disposable, this increases your security a little bit.

If you are using wireless network through a usb dongle you might need to choose "Use sys-net qube for both networking and USB devices"

You can also enable system and template update over tor, but this will make it significantly slower for big updates. And there is no need to touch the advanced configuration.

-

Click done and let the scripts run, do not interrupt it by closing your computer

+

Click done and let the scripts run, do not interrupt it by closing your computer, it might seems unresponsive for a while.

And finally we get our Qubes, in next tutorial we will start to compartmentalize our online activities by creating different qubes.

+

Next tutorial : How to use qubes for different online activites