The latest version of the whistleblowing platform SecureDrop runs on the Qubes operating system. At the Guardian we used the Salt management engine to set up a Qubes environment where journalists could safely interrogate sensitive documents.
I love the fact how all the things they list make sense for security and then there's just:
A Nautilus extension
Of course, when reading on, the article mentions it's there for convenience to avoid having to open a terminal, but I still found it really funny when reading the list.
Honestly, once you use Qubes there's no going back. Its a game changer that's magnitudes safer than running everything on one system or trying to silo some subset of your work to dedicated VMs manually
Really? There are some pretty serious trade-offs that Qubes requires if you're going to use it as your daily driver. I'm far more security-conscious than anyone I know, but I couldn't bring myself to make those trade-offs.
Honestly, once you use Qubes there's no going back. Its a game changer that's magnitudes safer than running everything on one system or trying to silo some subset of your work to dedicated VMs