Ubuntu Livepatch Reviews

Whonix Reviews

Ubuntu Livepatch mentions (7)

• Is kexec safe?

  There are some in-place kernel patching tools, i.e. `kpatch`, [livepatch](https://ubuntu.com/security/livepatch), and some other proprietary solutions, but they're for narrow targeted patching of security issues mostly and not for all out replacement of the running kernel. Source: about 1 year ago

• Apple has just released the first Rapid Security Response for Ventura

  > Anything that involves system services This is not true. NixOS, as one example, is able to figure out which services (including system) need to be restarted. > god forbid the kernel This is not true either. Live kernel updates are possible (but are usually a paid addition, e.g. https://ubuntu.com/security/livepatch). - Source: Hacker News / about 1 year ago

• What are you using for patch management?

  For patching running kernels against CVEs when you can't immediately reboot, there's Livepatch as well. Source: over 1 year ago

• So I'm back to Ubuntu LTS

  For security updates, yes, not for everything. See here: https://ubuntu.com/security/livepatch. Source: over 1 year ago

• Any advantage to Ubuntu Pro Desktop?

  Ubuntu Pro is how you get Kernel Livepatch which applies security fixes to your running kernel without needing to reboot. Source: over 1 year ago

Whonix mentions (13)

• When downloading and exmaning files from the darkweb, what is the safest option for opening a file in virtualbox tails.

  Virtual box Tails is pointless. Just use Whonix.. To examine files also use VirusTotal. Source: over 1 year ago

• currently running tails over vm on the most secure settings for both programs what could be a point of weakness like would u recommend a vpn a proxy chain? what would u recommend for extra anonymity?

  Running TAILS in a virtual machine for anonymity is a fools errand. Research Whonix and its independent gateway and workstation VM. Configured correctly the only network interface of the workstation is the gateway over Tor providing a higher assurance of security. Source: over 1 year ago

• Firefox with tor?

  Whonix is a Linux-based environment that can theoretically transport any TCP/IP application over Tor and greatly reduces the potential for IP leaks by having a secondary 'gateway' that runs Tor independent from the client device over a private network. Source: almost 2 years ago

• How to Code Anonymously, Part 2: Network Security

  The previous strategy is great, but it's actually easier and more effective to just use Whonix. Whonix is a Linux distro - designed to be run out of VirtualBox - that implements all the goodness of the previous strategy. Even better, it comes with a novel network architecture that involves two virtual machines for extra protection:. - Source: dev.to / about 2 years ago

• Qubes os Team - issue report

  Since this appears in sys-whonix, I suggest reporting this to the Whonix team. Source: over 2 years ago