Recently I've been musing about how to harden my home desktop setup, and perhaps Qubes is still something to look into. At present, I still feel a little pang of paranoia/guilt whenever I use sudo from the same account I do most of my web-browsing on.
I can put most software-development stuff into a rootless Docker container to deter supply-chain attacks--I'm not sure how that compares to Qubes virtualization--but if some 0-day gets in through a desktop app I'll be in trouble.
I can put most software-development stuff into a rootless Docker container to deter supply-chain attacks--I'm not sure how that compares to Qubes virtualization--but if some 0-day gets in through a desktop app I'll be in trouble.
https://xkcd.com/1200/