Qubes - strong security for desktop computing

[AaronM]

I just came across this article, which answers my pondering about the difficulty of Linux keylogging (answer: it's very easy) :

http://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html

I saw that the blog author has a Xen/Linux-based OS to solve this problem and provide a secure GUI:

http://qubes-os.org/Home.html

[1715018447]

1715018447

[1715018447]

1715018447

[1715018447]

1715018447

[1715018447]

1715018447

[1715018447]

1715018447

[error]

Sure, keylogging is very easy. Getting the keylogger onto someone's computer is very hard.

[AaronM]

The more programs running as that user, the more potential security holes there are to exploit.  There is no security in depth.

http://en.wikipedia.org/wiki/Defense_in_depth_%28computing%29

[error]

Though this is more about X, and how much it sucks. It should have been abandoned long ago.

[Jaime Frontero]

couldn't you just enable keyboard assistance (or whatever it's called in windows or MacOS), and use your mouse to enter passwords?

[error]

couldn't you just enable keyboard assistance (or whatever it's called in windows or MacOS), and use your mouse to enter passwords?

Sure, but you can swipe mouse events just as easily.

[Jaime Frontero]

couldn't you just enable keyboard assistance (or whatever it's called in windows or MacOS), and use your mouse to enter passwords?

Sure, but you can swipe mouse events just as easily.

hmmm.  my understanding is that you can only capture mouse position events, no?

use a different keyboard layout every time...