Component: Workstation hardware
Defined in model.py:401
The laptop running Qubes OS, including its CPU and peripherals.
Threats Affecting This Component
| Threat | Status | Risk | After mitigations | Mitigations |
|---|---|---|---|---|
| Attacker has temporary physical access to workstation laptop and can disassemble it THREATQW60 | partially mitigated | 9 high | 9 high | Use safeboot or qubes anti-evil-maid for measured boot (https://github.com/freedomofpress/securedrop-workstation/issues/602); Use coreboot on workstation |
| Intel Firmware (incl. management engine vulnerability) THREATQW25 | transferred | 6 medium | 6 medium | |
| Supply chain attack on workstation hardware THREATQW26 | accepted | 6 medium | 6 medium | |
| Workstation laptop is seized/stolen THREATQW30 | partially mitigated | 6 medium | 6 medium | |
| CPU-based attacks THREATQW12 | accepted | 3 low | 3 low | Disabling hyperthreading (done by Qubes) |
| Hyperthreading THREATQW54 | mitigated | 6 medium | 2 low | Disabling hyperthreading (done by Qubes); Don't use intel CPUs |