Are Tuxedo Laptops more secure?

TacticalCheddar

Hi, folks!

I need a new laptop for work and I was considering buying this one from Tuxedo Computers. I've heard about this company at the beginning of the year, but I don't really know much about it other than the fact that it's European and Linux friendly. I need something with good security since I'm going to store some sensitive information on it so I'm wondering if it would be a good choice.

The website says it offers full hard disk encryption and also a ''Trusted Platform Module (TPM 2.0 for short)'', which reminded me of the Titan M2 found in Pixels. I don't have any technical expertise so I don't really know what to make of this. Should I just go with a Macbook instead?

Please go easy on me. It's my first time here.

userofgos

TacticalCheddar Should I just go with a Macbook instead?

This is the most recommended option by the GrapheneOS project: https://xcancel.com/GrapheneOS/status/1979321178440544551#m

Yes, modern macOS on their recent hardware is far more secure and has gone a long way towards moving desktop OS security closer to mobile security. It's still quite a lot less secure than iOS but far more progress has been made than desktop Linux or Windows. It's not even close.

The hardware macOS runs on is far more secure than other laptop/desktop platforms and macOS is the only OS available for it which uses most of the hardware-based security features. They'll probably even deploy hardware memory tagging for macOS in the near future.

There is a couple mega threads on this forum, one being: https://discuss.grapheneos.org/d/27459-macos-vs-linux-for-security-and-privacy

KitsuneNoBaka

TacticalCheddar If you even once boot machine with secureboot and tpm to windows with microsoft account all your certificates will be uploaded to your account and in case of "emergency" microsoft can decrypt your machine/drive with it.
TPM is also great fingerprint ID. Each TPM have it's own ID and it is available to check this ID by WEB.

troika

Veracrypt has stated that TPM is unsafe, so Veracrypt will not use TPM. I suggest you use Veracrypt to encrypt your computer.

GrapheneOS

troika It's not using a TPM that's unsafe but rather solely relying on it which is unsafe. Both Windows and systemd have an unsafe approach to using it. TPM is a terrible secure element API and most implementations are terrible but it can be used in a way that it's not trusted and can only add security. It's a software mistake if it chooses to trust the TPM for disk encryption where a TPM exploit breaks the disk encryption instead of using it as supplemental security.

1qkv9ddu3so2irvz

GrapheneOS but it can be used in a way that it's not trusted and can only add security

Details?

I have a tuxedo laptop, but I never considered it more secure than any other system. It just works really well with Linux. I also don't think their official OS is especially secure in any way.

KitsuneNoBaka

KitsuneNoBaka There is a rant of former MS developer about Win11, but there also rant about secureboot and TPM:
https://youtu.be/C44iCr6czAo?si=s6PqObQ70YU_6cv1

indigomadelin

KitsuneNoBaka
https://discuss.grapheneos.org/d/20165-response-to-dishonest-attacks-on-the-grapheneos-project-by-robert-braxman

DeletedUser499

"Are Tuxedo Laptops more secure?"

Its how you use them that counts
Don't think software can save you
Don't be complacent with security
Don't give security to someone or something else to keep you safe.
If security was easy everyone would practice it
G@@gle apple, etc is simple and people are lazy, a perfect storm...