> Even with software isolation though I am beginning to think that hardware > isolation when implemented properly is more secure than software isolation, with all the Xen bugs recently.
The Qubes OS team are going to ditch paravirtualization for hardware-based virtualization since all the fatal Xen bugs that affected Qubes have been in mechanisms for handling memory virtualization for paravirtualized (PV) VMs. > Is there any comments on the way Whonix gateway and TBB work together? In the Whonix workstation they use this package to prevent Tor over Tor with the TBB, https://github.com/Whonix/anon-ws-disable-stacked-tor Its implementation is well documented here, https://www.whonix.org/wiki/Dev/anon-ws-disable-stacked-tor#Why.3F -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk