QubesOS/qubes-secpack
View on GitHub ↗ ★ 555 Python
Qubes Security Pack
9 mentions on Hacker News by 7 people: 2 stories, 7 comments · first 2015-10-29 · latest 2024-04-06
20082026
-
…virtualization. The escapes you mentioned were the main reason to do it. More info: https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs...
comment by fsflover · 2024-04-06 · in Working with Qubes OS at the Guardian -
…. Also, such vulnerabilities were the reason for them to switch to VT-d by default: https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs... . I'm not an expert, but how could it affect the VT-d even in principle? AFAIK VM escape is…
comment by fsflover · 2023-12-23 · in Qubes OS 4.2.0 has been released -
…done with a short script adding current headlines and bitcoin block hash to their warrant canaries: https://github.com/QubesOS/qubes-secpack/blob/master/canarie... edit: and the script itself: https://github.com/QubesOS/qubes-secpack/blob/m…
comment by crtasm · 2022-03-05 · in QR Date – signed timestamps inside for verifying dates -
…attack of the three discussed, cannot be exploited _from_ a fully-virtualized (i.e. HVM or PVH) VM. https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs... 3. It serves as an additional virtualization layer on top of Xen…
comment by fsflover · 2021-07-26 · in When will we get secure desktop OSes? (2018) -
Here's a link to Qubes' security tracker with the updated details about it: https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs...
comment by xf86alsa · 2018-03-29 · in Qubes OS 4.0 has been released -
…to keep read-only. Xen is used by security-focused Qubes, which published an analysis of XSA-148, https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs... : "The above is a political way of stating the bug is a very critical one.…
comment by walterbell · 2015-10-29 · in Critical Xen bug in PV memory virtualization code -
Here's some analysis by the Qubes team: https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs...
comment by mrwizrd · 2015-10-29 · in [XSA-148] x86: Uncontrolled creation of large page mappings by PV guests