Qubes OS: Security Oriented Operating System
Вставка
- Опубліковано 23 тра 2020
- Qubes OS securely divides a user’s digital life into separate domains (or “qubes”) that are isolated in different virtual machines. This video covers Qubes OS system requirements, installation and setup, along with a demo including workspaces, copying data between Qubes, block device handling, and installing and accessing applications.
You can download and support Qubes OS at: www.qubes-os.org/
If you are interested in alternative operating systems, you may enjoy my following videos:
NomadBSD: Persistent Live USB OS:
• NomadBSD: Persistent L...
ReactOS: Free Windows Alternative:
• ReactOS: Free Windows ...
RISC OS on a Raspberry Pi:
• RISC OS On Raspberry Pi
More videos on operating systems, and broader computing and related topics, can be found at:
/ explainingcomputers
You may also like my ExplainingTheFuture channel at: / explainingthefuture
#QubesOS #SecureOS #ExplainingComputers - Наука та технологія
The real question is why we didn't get something like this twenty years ago. Forty years ago, the answer was simple: No personal computer networking, and not nearly enough memory. Thirty years ago: still not quite enough memory and personal computer networking was mostly limited to BBSs. Twenty years ago, when the Internet was taking off and the first few generations of viruses and malware were infecting Grandmom's computer and she had no idea why it was slowing down so she just lived with it, this is exactly the sort of thing that was needed.
@Din Ding my grandma prefers to use tails when purchasing her medicine
17 years ago there were options. I used to clone a usermodelinux image that parsed /proc/cmdline in rc.local for hostname, ipaddress etc. then theres xnest (and xephyr) for a kinda naive gui isolation. ironcally, the one app hard to isolate was the browser. vmware was pretty common, but obviously took more resources. good for that browser.
before qubes, i knew others who virtualized their desktops too. we all just wrote our own way. by then i was using virtualbox with ansible and packer. some did similar with virtualbox. and of course, theres vagrant, the 2nd easiest way.
@@raymundoo2879 your grandma must be always high
Thanks, Mr. Chris. I have been reading about this OS already. Never thought you would make a video about it, let alone entering the secure computing domain.
The U.S: intelligence community and your own government as part of the Five Eyes alliance, are against this as they are enemies of privacy and secure civilian communications.
Not only you are the best, now you are also the bravest teacher. Thank you very much.
I'm so grateful to you for introducing Qubes to the wider audience. I believe we need more privacy and security tools for wide population more than ever now. Qubes is so innovative and helpful.
Let's go and take a ..............closer look. And relax
:)
Chris is like the Bob Ross of tech talk........ :)
@@buggerlugz6753 true, but without that crazy haircut
@@buggerlugz6753 - I let out a good laugh at this, but it's true.
We are guests of the most chill tech talk voice in the land, when many are overly brash in their delivery, and we get you sit back and relax.
I love the consistent format of this channel's videos.
One can not become sad when a new video from Explaining Computers arrives in the inbox. Thanks for the good introduction on Qubes
I like the way Christopher explain!!!
Using that OS would probably expand the minds of most computer users.
:)
You pick the best topics from extremely wide ranges of technology... it seems like whenever I find some new gadget or software that is interesting you have already done a video on it
Nice to see someone building an OS to simplify the use of multiple virtual machines. It’s going to help those advanced users for sure.
I haven't used Qubes in years. Joanna is a brilliant developer! Thanks for bringing attention to such an undervalued privacy tool! At first, I thought you were running this on ARM SBC and was very intrigued. But you are brave for submitting a Celeron to all this workload.
She is indeed brilliant, but unfortunately she hasn't been working on Qubes OS for a while: www.qubes-os.org/news/2018/10/25/thank-you-joanna/
I found your channel when I was looking for things to do with my Raspberry Pi, but I like that your channel varies from week to week. Sometimes it's hardware, sometimes software. Thanks.
I try to keep a mix of content -- SBC generally every other week -- including a Raspberry Pi video next week. Thanks for watching. :)
It is such a cool operating system, it should be renamed “Ice Qubes”. Looking forward to your next video!
Frozen
Dear lord.
Good one Perry!
@@dadadaddyoo
Ice cubes LOL
I gave Qubes a run roughly 6 years back now and just couldn't come to grips with it at the time - thanks heaps for this great explanation Chris... might be time for another spin round the block with this 👌
I've watched a few videos on this OS, and found yours to be the best tutorial, and presentation. Thanks as always!
Looks like a user friendly combination of Jails+Bhyve on FreeBSD.... very nice indeed!
Thank you Christopher, you manage to educate & entertain in equal measure....very much appreciated...
I enjoy learning from this channel your videos are very well thought out and flow nicely so staying tuned is easy.
Thanks for presenting this. I've heard about the OS before, but I didn't give much thought into it as I didn't know all of it's use. As usual, you have broken it down into very clear and concise concepts.
Thanks Leslie, hope all is well with you.
I am blown away - that OS is absolutely amazing. Thanks, as always Chris!
It seems your reaction to Qubes OS is the same as mine.
WOW! Extremely interesting video Chris. Fastest 17 minutes I've spent in quite some time. Well Done. Thanks.
Another clear, interesting and well structured video. Thanks, Chris
An excellent video, as usual . I'd never before heard of Qubes OS. What a fascinating concept!
Will I use this? Likely not but fascinating nonetheless. Perhaps more important for me is the relaxing interlude I get every Sunday morning, so valuable during these times. Thanks Chris!
I have just watched an excellent and informative video on an OS that I will never use!
Well done Chris...
Thank you, Chris. Great job. Your videos are always worth the time to watch. I learn something every time.
Thanks for your kind feedback, appreciated.
I’m impressed Prof, this is the ultimate sand boxing of apps on one system. I like it.
What an interesting and novel approach to an OS. Based up the video, its seems that the user really needs to choose a specific template to serve as the basis of all of their qubes. Otherwise, the user would need download and install apps for each of the templates, taking time and storage space. Thanks for an outstanding video both in terms of the introducing the Qubes OS to the community and the excellent productin values you bring to each of your videos. Keep up the excellent work.
Yes, you are right, basing all qubes on one template would save space and multiple software installs. But you may also want different software in different qubes.
This is a great idea for an operating system. On the occasion when I have a file I'm not quite sure about, I sometimes use an old laptop as my 'virtual' machine to open it. I can see where Qubes would be very handy indeed. Thanks for another great video! On an unrelated note, yesterday my Odroid XU4 arrived. My wife was in the room when I said 'not to worry, Mr. Sicissors will get us in'. Her look was priceless!
:)
There are a number of sandbox programs you could use for your purposes, which are essentially disposable isolated segments of your native OS.
@@FlyboyHelosim I tried that but my cats used it too... it didn't turn out well.
OK, I always enjoy your videos, but this one has me more animated than usual on a Monday morning!
The concept is great! No need to use Vmware/Virtualbox to operate multiple OS in one machine.
Just got the notification, and here I am. Can't miss a moment.
Qubes is an amazing OS for someone wanting virtual system environment.
Agree!
And who (of non-hacker, non-sysadm, non-seo-spammer) can that be? ;)
As usual you give us valid and brilliant information. I just started with Qubes OS two days ago, after i found a laptop that could run it. Just took me 1½ years of waiting. And I was wondering how to install like Libress in Qubes OS. Because i could not get access to the internet. But you show us how, so now i gratefully can continue my new quest with Qubes OS. I hope you will make more stuff about Qubes OS.
Enjoy your journey and experimentation!
I really appreciate the time you take editing. Nice video
Brilliant as usual
Thanks!
Very interesting concept for an OS. Thank you for this great introductory video about it.
Very interesting. There are a lot of features provided by the CPU vendors that are included so that wise system programmers can lock things down. This OS takes advantage of some of these arrangements. I am interested in learning more :-)
Excellent - somewhat familiar with Linux and seeking security and privacy but couldn't make head nor tail of Qubes until your video - thank you!
Deffo looks like one for a test drive and possibly much more.
Thanks for that!
Excellent introduction to Qubes OS.
Only watching it now as I am new to the channel.
Clearly there is security value in separating different tasks in
different virtual machines. But attack vectors will still exist.
The cross-cube copy mechanism being a case in point.
The Windows sandbox could be used in a somewhat "similar" way.
But already people are discussing how to hack it.
Cross VM hacking is not unknown.
Hi Chris. Just want to thank you for your great in depth technical videos. I used to watch Twit TVs Screensavers way back when it was very technical but they transitioned to just talking about phones and of coarse the show is now gone. Hope to keep seeing more of your great videos for a long time to come! Thanks again!
Quite interesting. Not something that I can see myself using. But, a very informative video as usual. Well done, Sir!
I Started Watching Your Video But Got Off On The Hardware So Much, I Had To Go Watch (Like & Comment) Your Video From April Featuring The Board Itself. You Sir Will Always Rock!
Thanks for watching both videos! :)
Pretty Cool... Like different containers preconfigured. Very useful. Thanks for sharing 👍
I'm really digging this video.
Great video for a cold, quiet sunday.
Thank you Mr. Sissors, it's a brillant video 👍👍👍
I've seen Qubes before but after seeing this brilliant video I really need to try it myself ;)
We use this pretty exclusively to maintain our client's networks, nice to see a video about it!
Great to hear.
Excellent Chris, I will give QubeOS a try, thank you very much!!
A very ambitious project.
I've known Qubes OS from the first release and I can say it the most secure OS I can think of. Great desktop OS.
I don't think Tails or Whonix are more secure. They all have their own use-cases. Kodachi is probably the most secure after Qubes.
Anything running on a closed source RISC Intel chip is not secure.
@HaloBaller9813 Whonix is embedded in Qubes. Depending on your threat model OpenBSD is more secure for some.
That is indeed the best OS innovation i have seen in a long time. Thank you.
Thinking about it more; I'm running win10 and Mac Mohave on an Intel i7 with the OracleVM. If I were to upgrade, would you recomend an i9 or the threadripper from AMD?
I do love the virtualisation of this OS and the ability to assign things like networking to one VM and not the other.
Would allow me to, finally, get control over the OS back. And still be able to fall back on my windows developer software dependancy.
Highest regards, Machiel.
Thanks for this. The Intel/AMD call at the high end remains a difficult one. Personally I'd go Intel.
Thank you Chris for all your hard work!
Your the best! Love your videos.
I appreciate that!
Very cool concept thanks for the detailed video
You definitely need to explore this thing more by testing out a windows template and by doing some performance tests with stuff running on native operating systems vs their virtualized variants.
Speed difference is negligible - you'll obviously have multiple OSes competing for CPU and RAM if you run 2 or more at once, but unless they're doing background tasks (updates for example), it'll be no different to running the apps you have up front on one single OS.
Very interesting. I have been doing something similar with both physical and virtual machines for years. Curious about high level security and also concerned about the single point of failure. Then again most people don't have a Windows domain in their house like I do.
This is quite a neat OS. I think I might convert one of my systems to this for testing untrusted websites. I like it.
It is interesting to see Xen used in the workstation / client arena, I suppose it only makes sense and yes very nice wrappers around the xen tools to create dom U's via templates which is very similar to the text only templates for server grade installations.
Haven put this on lower grade hardware the demo here just goes to show how robust / mature the XEN VM archetecture is and should be a testiment to it being the best solution for any VM requirement. Linux has a number of VM options those being XEN , VMWare , QEMU , VirtualBox , KVM each has its pro's and con's and use case.
This was a good overview of a good use case for Xen.
Wow !
This OS is something else isn't it.
Great video as usual .
Thanks EC.
It sure is! Qubes OS actually does something different. And it actually works too! :)
Nice looking OS and vid, I just realised theres a merchandise page :) brilliant, can't wait for my first Sunday cuppa tea with Mr Scissors..
Fascinating...I loaded to a dell E7240 ultra-book which has a 512gb msata drive and 8gb of memory and it seems to be quite happy. I did have to fiddle a bit with usb drivers but well worth the effort...connected to my wifi without fuss but much faster via Ethernet and the UI is very pleasing to navigate...Thanks 👍 !
Sounds like you are having fun experimenting! :)
Very interesting. It would be nice to understand any performance penalties imposed by this additional security.
Well made video. Very interesting. The moment you said it used Xen. I was on board.
Brilliant! Will definitely give Qubes OS a try 🤩
thanks for the video ! pretty cool os, I need to keep on eye on this
Very good introduction to this OS!
I don't care where I placed in the comments, I enjoy your videos on Sunday mornings with my coffee and breakfast :)
Been a long time since I've seen an OS I've instantly fallen in love with! I'm going to have to check this one out. It looks like a brilliant idea expertly executed.
Very interesting. Nice security via virtualization
Looks like a very interesting idea, will have to give this a try
Thank you for that soothing voice!
Another amazing video! 👍🏻
Good video. The Odyssey x86 is certainly a powerful SBC. It would be great to see a video that went more in depth to the Odyssey x86's compatibility with Qubes OS. Where subjects like Qubes Air and Qubes Odyssey and Split GPG are talked about
An elegant solution, thanks for sharing. 🖖
That's pretty amazing. My PC probably can't run it, but the next I build might be a qubes machine.
Very good video and very interesting OS, thousands thanks EC
🙏
Love your stuff and love your style. I teach IT professionals and usually find some cool nuggets in your videos. I will admit, though, that one of my pet peeves is folks pressing Apply then Okay. That's redundant. Apply saves your changes but leaves the dialog open so that you can make more changes. Okay saves your changes and closes the box. No need to do both.
I am well aware of this. But this is a video, and getting everything perfect in a single take is extremely difficult. This video was recorded over 4 days (168GB of data grabs), and most takes were done at least 10 times, with considerable reset in between. As soon as I clicked on "Apply" I went "damn" in my head, but there I'd done it. So I left in the two clicks on "Apply" and then "OK". Remember this is a video -- it is not real life! :)
5:58 Looks like you didn't quite go with the defaults. You can see the tick appear on the "... updates over Tor ..." option. Perhaps you double clicked where only a single click was needed. ;)
Anyway, nice video Chris.
Thanks for the run down.
Never heard of qubes, thanks
I’m very tempted to start using cubes. I like the concept of it, and it’s not too far from what i do now with arch. This doesn’t take care of all of ones security needs, but can really help out a lot. being careful with what cube one is using at any point is very important. Still, it’s an amazing idea
You can run Arch in Qubes. You will need at least 16 gigs of RAM tho.
Awesome Content, And Illustration.
Nice vid man i love your channels
Thanks.
Excellent¡ Something new to try these crazy times
A very helpful tutorial indeed, thank you 🙂
That's the coolest thing I've seen in a while.
:)
Hi Chris. A novel idea and a very interesting OS indeed.
Listening this Sir, I learn English language also. He is perfect !!!
Here’s an English lesson of how to say what I think you meant in your comment: listening to this, or: listening to you, or: listening to this video, I am learning English, as well as how to use the Qubes operating system (OS), which is perfect because I am learning both at once!
Kinda reminds me of Bromium which got acquired by HPE last year. Of course, Qubes goes a bit further by taking privacy onto account with Tor, so that's nice, and it's also open-source.
Amazing. They need a tester to see how your system will perform with this OS.
Good to follow-up with a video on the Windows "Sandbox" feature.
yeah it was really funny how that was just brushed over
As the computing power available to us supersedes our ability to even make effective use of it the majority of the time, an operating system like this that puts virtual machines front an center of everything becomes more than just a grand security experiment, but entire in-home mainframes could be possible that could be running any operating system ever.
The ease by which a person with one, big, powerful machine that they maintain and upgrade can provide sandboxed computing environments for an entire household with just a few clicks excites me more than the security implications.
Everything else is networked dumb terminals. Most people won't WANT to do that, but .. I do. Something about that idea just excites me a lot.
Alright... this OS is pretty slick. I thought at first the separate virtual machines were only limited to 4 at a time because of those squares at the top, I didn't expect that to represent 4 individual desktops.
Thanks for this lecture.
Afternoon sir. Hope you're doing well and keeping safe!
I am doing OK. I hope that you are too!
@@ExplainingComputers Glad you're doing well. Besides being very bored during my free time and being stuck on MS Teams during work, I'm fine thanks!
Interesting. Easy to use VM. Great video.
I like to mess with Qubes OS, I absolutely like the idea of having all separated in small virtual ‘qubes’. Brilliant. 👌🏻
Hello Chris.
Excellent video. 👌🏻
I hope you are well and safe.
Hello Elvira! I might have guessed you'd be in to Qubes OS. I am doing fine, and hope that you are too in this strange, strange world.
It Looks Very Interesting Chris, Thank You Very Much..
Greetings !! !
Nice coincidence. I just was looking into this this week. The inventor is a very smart woman, Joanna Rutkowska, and she is definitely looking out for us. I trust her. Which is saying a lot. And the OS seems to have thought of everything, including obscure things.
Very interesting concept for an OS, I would imagine it might be useful to those who are working from home at the moment because of the pandemic ie: separating work from personal files.
Very true.
Cool idea that seems pretty complex to set up but I'd imagine it'd be pretty easy to use once you got used to it.
I originally found this channel while browsing without an account and just now remembered I didnt subscribe. Now I get to catch up from the past month or so!