[DelaneyM]

It’s not much harder to just harden your system to not be vulnerable in the first place, and that protects your from a lot more.

[chii]

> It’s not much harder to just harden your system

'just' harden the system is not easy.

But installing something like a vmware guest driver is easy, as even a non-technical user can do it following some basic instructions.

[anonymars]

Defense in depth

[Melatonic]

Agreed - like using a non admin account.

[anonymars]

How does that protect against ransomware?

[ronsor]

Please tell me what tools you use to receive future zero-day vulnerability patches.

[ofjcihen]

To be fair the vast, vast majority of exploitation that we see (especially in the news) comes from sub-par security setups and poor training/architecture. That’s no even going into security monitoring which most companies don’t or barely have.

Zero days account for very small amount of exploitation in comparison and by definition are unpatched so I think the commenter was right to point out the basics.

[fsflover]

Qubes OS should protect you even from unknown vulnerabilities as long as you use its compartmentalization approach. Works for me (or so I hope).

[danielschreber]

Wikipedia's page on "just intonation" is, oddly, about music.

[andybak]

OK. You've lost me.

[cwmoore]

And it is so too that “just deserts” are rarely desserts at all.