QubesOS: Desperately Securing The Desktop

QubesOS is an security-based operating system that isolates every application using virtualization. This is similar to how your phone creates a sandbox for each application you run but QubesOS isolates your email client from your PDF viewer, for example, using a hypervisor. It's an attempt to answer the question "How do I secure my desktop if I don't trust the hardware?" This talk will cover how QubesOS works, what security it provides, and lessons learned from using it for the past few years.