Adversaries vs. Auditors in Hardened Linux
From My Weird Prompts · 26:59
Show by Daniel Rosehill
Half of what gets sold as hardened Linux isn't built to stop attackers—it's built to satisfy auditors with DISA STIG and CIS compliance checklists. Part one of this two-part look at hardened Linux separates compliance-focused builds from adversary-hardened systems like Qubes, Tails, Whonix, and Kicksecure. Each makes a distinct architectural bet: Xen-based compartmentalisation, amnesic USB sessions over Tor, isolated gateway-and-workstation VMs, or strict security defaults like torified updates and user-sysmaint-split. Key sources: • Qubes OS documentation, Introduction , retrieved 2026-11-13. — https://doc.qubes-os.org/en/latest/introduction/intro.html • Qubes OS documentation, Frequently asked questions , retrieved 2026-11-13. — https://doc.qubes-os.org/en/latest/introduction/faq.html • Qubes OS, Endorsements , retrieved 2026-11-13. — https://www.qubes-os.org/endorsements/ Episode 6579 — myweirdprompts.com/n/6579 (permanent short link: myweirdprompts.com/074721) Listen on Android: MWP FM Player — myweirdprompts.com/apk
More episodes of My Weird Prompts
More episodes
- When to Skip the CLI Wrapper for AI Agents
- Xpra and Per-Window Remoting for Remote Browsers
- Why Comparing Two Things Beats a Rating Scale
- Why AI Leaderboards Dropped Elo for Bradley-Terry
- Four Primitives Behind Every Pairwise Eval Tool
- How OmniVoice Cloned Our Voices From Our Old AI
- How One-Way Data Diodes Protect Power, Water, and Rail
- Chatterbox Retires as Open TTS Splits in Two
- Why Text-to-Speech and Speech-to-Text Aren't Mirrors
- How Air-Gapped Linux Systems Actually Get Updated
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.