Hacker News Reader

Last escape from hardware virtualization on Qubes OS that I'm aware of was in 2006, by the Qubes founder: https://en.wikipedia.org/wiki/Blue_Pill_%28software%29.

I’d only touch this stuff with an airgapped machine which is imaged before and after.

And even then there are ways to put malware into BIOS and disk firmware. Seriously: only a throwaway machine.

On a Pinephone or Librem 5, there is no such semi-writable firmware. You can wipe them fully AFAIK.

Put it on a stone tablet to be on the safe side

Sorry I actually meant virtual virtual machines - they don’t even exist. Truly the only secure option.