TL;DR - About switching from Linux Mint to Qubes OS from among various other options that try to provide security out-of-the-box (also discussed: OpenBSD, SculptOS, Ghaf, GrapheneOS)

  • non_burglar@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    8 hours ago

    Sure, but if the compromise stays within its own app, like for a browser, sandboxing won’t help.

    The bulk, and I mean like 95% of the compromises I see are normal employees clicking on things that “look legit”.

    Excel is now wrapped in a browser. Discord, almost all work apps are all wrapped in a browser. So you can be completely locked down between apps like grapheneos, but if you are choosing to open links, no amount of sandboxing is going to save you.

    This is why we deploy knowbe4 and proofpoint, cause people are a liabilities, even to themselves.