StolenWindows
kiwifarms.net
- Registrado
- 1 de Ago, 2025
I already mentioned this in the Linux thread, but I think this subject deserves a thread of its own, because people still seem to think that installing Qubes on a "fully Libre'd Thinkpad" is going to magically solve their problems.
1.) Only GNU w/ kernel hardening and Guix are any good. Qubes is good for security, but not for privacy (since everything runs in isolated VMs, such as work, banking, browsing and development with each getting its own domain, which makes it prone to metadata leaks). Arch is just a woke version of Gentoo. Manjaro is just trash that wants to be Windows.
2.) And even while it might be more compartmentalized than, say, GNU, however BIOS/UEFI is completely independent of Qubes OS. Qubes cannot protect or harden the BIOS directly, since it operates below the OS level. So if an attacker gains access to the BIOS, they can still modify the boot process, potentially bypassing Qubes entirely (for example, loading a rootkit or altering boot configurations). Contrast this with GNU, which uses Coreboot as a FOSS replacement for BIOS and UEFI.
3). Is not compatible with RISC-V/POWER9 architecture anyways.
Don't listen to NSA agent Edward Snowden. Once a glownigger, always a glownigger. He sold his soul and now he's trying to act like a "cybersecurity expert" LMAO. Also, even if you scrub the hardware backdoors in the chip, other things are still untouched, such as the proprietary display, the proprietary hard drive (which even if it were open source, you'd still need Faraday protection to prevent sidechanneling) and so on. It really shows you how much of a scam all of this is. The closest thing to a completely open source workstation that's on the market now is the SiFive HiFive Unmatched and Unleashed Single Board Computers (SBCs). They're desktop quality, but even they employ blobs of their own, since no desktop level SBCs are fully open source yet (just raspberry pi-sized SBCs and that's it, such as BeagleV Ahead/Starlight, Milk-V, lowRISC/OpenTitan and probably more).
1.) Only GNU w/ kernel hardening and Guix are any good. Qubes is good for security, but not for privacy (since everything runs in isolated VMs, such as work, banking, browsing and development with each getting its own domain, which makes it prone to metadata leaks). Arch is just a woke version of Gentoo. Manjaro is just trash that wants to be Windows.
2.) And even while it might be more compartmentalized than, say, GNU, however BIOS/UEFI is completely independent of Qubes OS. Qubes cannot protect or harden the BIOS directly, since it operates below the OS level. So if an attacker gains access to the BIOS, they can still modify the boot process, potentially bypassing Qubes entirely (for example, loading a rootkit or altering boot configurations). Contrast this with GNU, which uses Coreboot as a FOSS replacement for BIOS and UEFI.
3). Is not compatible with RISC-V/POWER9 architecture anyways.
Don't listen to NSA agent Edward Snowden. Once a glownigger, always a glownigger. He sold his soul and now he's trying to act like a "cybersecurity expert" LMAO. Also, even if you scrub the hardware backdoors in the chip, other things are still untouched, such as the proprietary display, the proprietary hard drive (which even if it were open source, you'd still need Faraday protection to prevent sidechanneling) and so on. It really shows you how much of a scam all of this is. The closest thing to a completely open source workstation that's on the market now is the SiFive HiFive Unmatched and Unleashed Single Board Computers (SBCs). They're desktop quality, but even they employ blobs of their own, since no desktop level SBCs are fully open source yet (just raspberry pi-sized SBCs and that's it, such as BeagleV Ahead/Starlight, Milk-V, lowRISC/OpenTitan and probably more).