Kenny33
On everything, I don't think so, you can always disable some telemetry.
Personally, I wouldn't necessarily feel comfortable using chromeOS, that's why I'm waiting to see if the pixel tablet will be supported by GrapheneOS.
However, having an unsecured system, leaves your data very vulnerable to other actors, where on chromeOS, it's only google.
There is no perfect option today.
Librem is not recommendable: It is essentially marketing and its OS is only a classic linux, which is not at all secure.
Chromebook, despite the privacy issue, is built on a true security model
[deleted] what do you think of librem hardware with Qubes os. With the pureboot firmware?
I will not recommend librem (phone or pc). It's very expensive for what it is: Marketing. It's sold under an open source package, while the hardware never is.
It is more relevant to look at the list of QubesOS compatible computers and get one at a decent price.
https://twitter.com/DanielMicay/status/1176530921446678528?s=20
https://madaidans-insecurities.github.io/linux-phones.html (about phone but it talks about librem too)
Thanks, that’s really helpful. I’m currently using Ubuntu and primarily using the browser (haven’t installed many applications other than brave). Does that feel ‘safe’ enough given I’m not installing other potentially malicious apps, or is the browser itself enough of an attack surface that I should consider moving to chromeOS?
I am saving for a new laptop, is apple silicon Mac secure? Or better to buy Chromebook 😼 Or what?
If we talk about linux (without going into details), I think that except on arch or gentoo, where one of the main interest is a strong customization of the system, and thus a reduction of the attack surface, by avoiding useless applications, it is relevant to think about switching to a chromebook.
But once again, no solution will suit everyone. Before I knew that a pixel tablet was coming out, I was thinking of switching to a chromebook, but it was a default choice.
You have to weigh the pros and cons. I spent years on linux desktop before coming back to windows, I personally won't go back, I don't consider it a relevant choice, with one or two exceptions.
I don't know enough about mac to talk about it, it doesn't attract me, but from what I read, if mac is probably more interesting than windows or linux, chromeOS remains more relevant on security.
iPad all the way?? No?
tmobile09 A Thinkpad X-series or T-series with Osresearch Heads firmware based on coreboot, running Qubes is probably the most secure you can get a x86 system. Heads checks the integrity of the boot process using signature validation by authenticator app based TOTP or hardware key.
This combined with Qubes OS and its virtualization based sandboxing of apps is pretty much the best bet from what my research has led me. If you follow best practices with this setup you must have a very skilled adversary upon yourself to not regard the system as secure.
https://www.youtube.com/watch?v=NqQI3nr1dqk
https://osresearch.net/
https://osresearch.net/Heads-threat-model/#threat-model
It depends what you wanna do with the stationary computer. If you want to keep it secure from outside, then just don't connect it to the internet, neither via cable or wifi.
You could still go online using a system on a usb stick.
The thing is, without internet connection the only access to your data would be through physical manipulation.
With Internet no Operating System can be hundred percent safe. Like the best doorlock can't prevent thieves from going through the windows, through the wall or simply ring your doorbell and knock you out.
So if you want to keep something confidential, don't ever put it on a machine with internet access or that has the possibility to access the internet.
I think this will never change.