HN Hall of Fame Weekly email

The Linux Security Circus: On GUI isolation

theinvisiblethings.blogspot.com Essays & writing Essays & articles Security & privacy Candidate
Screenshot of theinvisiblethings.blogspot.com captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 5 calendar years, with breakout response in 2 of them.

submissions
5
submitters
5
observed span
2011–2022
peak thread · 84 comments
126 pts
latest 20+ return · 2016-03-05
121 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

Qubes seems to be YASTVOS (Yet Another Security Through Virtualization OS). While I'm not going to disagree that Xen vms represent a smaller attack surface than most current installations, that doesn't mean there won't be bugs. If you shift everyone to a solution like this, guaranteed people will be breaking out of it. VMware has had a number of vm escapes. The other problem is these OS's often don't seem to get very far. Seems like Qubes is launching beta…

trotsky·126-point thread·

Am I wrong in thinking that this is sort of like worrying about leaving the kettle-on while you're falling from a skyscraper? Sure, if you have a rogue application on your computer, it can access the GUI of a program whose security is critical (e.g: a password manager), but even if all the GUI were isolated, you've still got a rogue program on your comp. All the security posts I've ever read have pretty much told me that once you're…

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
2

100+ points or 50+ comments

Total points
253

reference only — not used in Hall rules or ranking

Total comments
131

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2011-04-23 The Linux Security Circus: On GUI isolationFirst breakout · Best threadwglb12647
2015-03-10The Linux Security Circus: On GUI Isolation (2011)monort10
2016-03-05The Linux Security Circus: On GUI Isolation (2011)Latest 20+ point returndandelion_lover12184
2017-07-08The Linux Security Circus: On GUI Isolation (2011)theGimp30
2022-08-14The Linux Security Circus: On GUI Isolation (2011)timeoperator20