Protecting journalists from malware using QubesOS

Earlier this year at USENIX Enigma, I presented some recent work towards rearchitecting the SecureDrop journalist experience. In SecureDrop we currently use an airgapped workstation for viewing documents to reduce the impact of malware present in malicious documents. This presents challenges in terms of maintenance, usability, and even security (i.