I understand the usual story is that the goal is security benefits, and the compartmentalization (or rather the implied inconvenience) is the price for that. But for me the compartmentalization turned out to be a benefit on it's own, and actually convenient.
I find it extremely convenient to have multiple isolated / virtual workspaces for different stuff, even if you assume attackers / malice do not exist. Having separate VMs is not the same as having separate folders. I also love the VM templates, which allow me to do all kinds of experiments (e.g. install packages in the app VM, which disappear after restart). Or run VMs with a mix of distros/versions/... Yes, I could do some of that with plain VMs, but Qubes integrates that in a way that I find very convenient. The commands for copying stuff between VMs are muscle memory at this point.
Yes, there are limitations, like the lack of GPU acceleration. But movies in 1080p play just fine without it, and I'm not a gamer, so I don't mind much. I can't play with CUDA etc. on these QubesOS machines, and scrolling web pages with large images is laggy, but I find this to be an acceptable price.
I went through multiple laptops / workstations over the years, and the situation improved a lot I think. Initially I had to solve quite a few issues with installer, some hardware not working (or requiring setting something special), or poor battery life on the laptops. But after a while that mostly either went away, especially once I switched to laptops with official Linux support (Dell Precision were good, I'm on Thinkpad P1 G7 now). The battery life is pretty decent too (especially once I disabled HT in BIOS).
Is it perfect for everyone? No, certainly not. But it sure is great for me, and I hope they keep working on it.
Love the compartmentalization and being able to route VMs to different network backends and the ability to create ephemeral domains for quick tasks.
Thank you Joanna, Marek, Andrew, and all the wonderful contributors. I couldn’t live without Qubes.
Ugh, plus 1 to that. As much as people love hating "the new orange guy", there's a lesson behind the fact that he got rid of 80% of staff in a big company in an afternoon and pretty much nothing adverse happened.
To be clear the revenue collapse might be unrelated to the full but I'd call it adverse.
Human contact, even with strangers, has a profound impact on health, mental state and quality of life. This has been researched and proven over and over. We are simply wired to function in social groups. Our current state of individualism is rather exceptional, and a cause for many issues with (mental) health.
So, yes, you scrolling HN has an effect on my health, because the reverse is unfortunately true too: loneliness (and isolation etc) have a negative effect on humans
You haven't talked to me :D
I hate fountain pens with a burning, unbridled passion - from 6 to 17, they were the only acceptable writing implement at school, and I just remember endless blotting, leaks, ruined shirts, thefts, bent nibs (it was considered sport to grab someone’s pen and bang it hard into a desktop), and of course there was always some idiot blowing through theirs in the back of class, drizzling everyone with ink.
The moment I was finished it went in the bin, and ever since I’ve used disposable biros.
Fountain pens are an anachronism, kept about seemingly solely to torture children.
A benefit of those same restrictions means TSMC is building foundries in the US for a change.
GaAs sensors are awesome. Combine those chips with ML optimized compute on a silicon interposer and drone warfare gets a hockey stick in adoption.
As civilians we get functional self driving cars via trickle down.
And like sister comment says, ITAR is not about industrial or economic policy. It’s about maintaining a qualitative edge in weaponry. How is there a qualitative edge when you can buy the restricted components freely from China?
Just noticed the other comment on GP saying they’re restricted through a different list (EAR). It serves the same purpose so I’m leaving my response as is.
Retrofitting one system in my car which had the option code was a yak shave.
Most automotive systems get by this by limiting night vision to 8fps(!). Similar to how GPS was limited to 100m accuracy in the first civilian models.
What blows my mind is one can get Chinese models off Taobao with 60fps for 1/10th the price of US products like FLIR.
Phones are the best one.
Why?
Because (almost) everyone has one within reach.
Security enthusiasts and believers constantly fail to understand why straight passwords and to a lesser extent phone 2FA never go away: All their proposed alternatives and solutions are inconvenient.
Most people couldn't give a rotten rat's undead arse about security, but they will kill for convenience. Passwords and phone 2FA win and keep winning because they are convenient with good enough security.
Every part of the industry that matters has been bitten by using phone numbers as a 2FA mechanism. It's why they're actually disappearing and are being phased out in favor of apps, OTP tokens, and email codes, depending on the amount of influence technical people wield at a given org.