DivestOS sounds interesting but I am wary of any “mission-critical” software project (such as the firmware for my primary phone) that relies on a single person, for multiple reasons. Burnout and potential for social engineering by malicious actors being two of them.

GP:s comment made me curious as well. Usually, if multiple hardware vendors are supported there are separate branches with different maintainers. It doesn’t necessarily mean that the main codebase is bloated as a result.

For those that are looking to install GrapheneOS and want to ensure that their banking apps work as intended, here is a curated list of supported apps per country:

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

– Ladies and gentlemen, we got’em.

For what it’s worth, I chuckled at your comment. :-)

Security. The more popular a piece of software gets (including operating systems), it becomes a bigger attack surface for malicious actors to use.

Fundamentally, Windows security is not really that much of a swiss cheese people usually say it is. It’s just that more people (researchers and malicious actors alike) are actively looking for vulnerabilities in it.

CPU vulnerability mitigations would typically be distributed with the intel-microcode package for Intel processors on Debian-based distributions, for example.

And QubesOS isnt based on linux kernel. It uses Xen. Linux is used in the Qubes aka VMs.

The dom0 is very much running a Linux kernel, the same way your domU:s are typically running Linux kernels (although you could probably run any kernel in hvm mode).

As an example, here is the documentation on how to manage updates for the dom0 kernel:

https://www.qubes-os.org/doc/how-to-install-software-in-dom0/#kernel-upgrade

Obligatory XKCD reference: https://xkcd.com/927/

Yeah, that’s how I have come to understand it as well. They are the public figure of a company, and are paid “insurance money” to take the fall if needed.

The colloquial term for adult-themed comic magazines is, or are least used to be, Comix, I think. Not the porn ones, that is.

Hadn’t heard about deSec until now, seems to be run by some cool privacy minded folks in Germany:

https://desec.io/

And a trampoline!

Comments aren’t normally accessible unless you (independently) open and read the source code file as you would with any arbitrary file.

For the same price and power usage as the Pi?

If you’re looking for single people, Tinder or Grindr is probably a better place

+1 for Voyager! Writing this comment using it :-)