Originally posted by UtwigMU
View Post
As for browsing... it's a bit convoluted to use a dedicated VM / OS just for everyday browsing.
I think a more practical approach would be to run the browser process as a different (unprivileged & local) user that has very few system access privileges. You could even split the browser instances into different privilege/security levels (e.g. a browser instance that runs as an unprivileged user for everyday browsing needs, another browser instance that uses another unprivileged user for online banking and other secure access, and a browser instance that runs as the current user for Integrated Windows Authentication needs (intranet sites).
Doesn't Qubes OS use a similar approach?
Comment