2 HN users recommended this talk2 months2019–2022score 2
Years with an HN recommendation, 2007–2026
Recommended as a great overview of Qubes OS and how its compartmentalization works in practice.
Micah Lee's Circle of HOPE 2018 talk on Qubes OS, which isolates activities in separate virtual machines so one compromise, such as a bad PDF or USB stick, does not expose everything. He gives an overview timed around the Qubes 4.0 release.
“This talk(ii) from Micah Lee when 4.0 launched is a great overview/preview.” (HN, 2022)
If you are paranoid about something like this happening, just use [link] . all usb devices are jailed in a non-networked vm by default. In general, if what you do warrants that level of paranoia, qubes will help you massively. Micah Lee held a great overview talk at HOPE 2018: [this video]
In order of decreasing isolation: For hardware and system's security QubesOS(i) is superb for isolation at the (virtual)machine layer. This talk(ii) from Micah Lee when 4.0 launched is a great overview/preview. It's my daily driver, and I find it indispensable. For software security any standard linux distro you can utilize encrypted chroots(iii). This is how things like crouton(iv) work on ChromiumOS. For library isolation you could utilise virtual environments like virtualenv for python. ( or nodenv(v) for 'Node libraries') (i) [link] (ii) [this video] (iii) [link] (iv) [link] (v) [link]
Micah Lee did a talk about how he does it. In essence he uses Tor to connect to the VPN. He also explains how to pay for the VPN anonymously. I think it was part of his Qubes OS talk: [this video]
Micah Lee explains using Tor with a VPN and paying anonymously
Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.
Plays via YouTube's privacy-enhanced embed
3 Hacker News comments
From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.
Citations, criticism and jokes