The Star Labs StarBook is Qubes-Certified! : linux

[-] joojmachine@lemmy.ml 14 points 9 months ago

that's great, but is it forklift certified?

[-] parallax@local106.com 5 points 9 months ago

Asking the real questions.

[-] throwawayish@lemmy.ml 7 points 9 months ago

Oh wow! This is excellent news! I hope they'll also provide other privacy/security related features like Heads, the removal of the camera and/or microphone modules, pre-installed privacy screen, tamper-evident screws and packaging.

[-] library_napper@monyet.cc 3 points 9 months ago* (last edited 9 months ago)

It says it has coreboot pre installed. I assume therefore its not difficult to flash Heads, which is based on coreboot?

[-] throwawayish@lemmy.ml 1 points 9 months ago

Honestly, I don't know if that's the case; I always got scared whenever I saw the prerequisites for Heads in combination with the strict list of supported hardware. FWIW, the NV41 that's used for enabling Heads on NovaCustom's device is included in the short list of supported hardware for Heads, while -unfortunately- the same doesn't apply to the StarBook. I would love to be proven wrong though!

[-] library_napper@monyet.cc 3 points 9 months ago

Looks like a Purism. Is it any better?

[+] helenslunch@feddit.nl -3 points 9 months ago* (last edited 1 week ago)

[deleted]

[-] kellenoffdagrid@lemmy.sdf.org 1 points 9 months ago

To be fair, if you're referring to the "alleged" backdoors in Intel processes, there's pretty similar stuff going on in the AMD side too. That said, I still totally get not wanting to support Intel since they're definitely the shadiest of the two, and they've been awful value these days.

The Framework 13 AMD is pretty great though, can confirm. It's all I've ever wanted in a decent, repairable laptop.

[-] lemmy_user_838586@lemmy.ml 1 points 9 months ago

Can you explain a little bit? Which backdoors are you worried about with Qubes?

[-] taanegl@beehaw.org 5 points 9 months ago

Historically speaking, IME has been a low hanging fruit of attack vectors and intel has arguably speaking had worse problems with security vulnerabilities on hardware and firmware levels than say AMD or ARM. A bit anecdotal, but there you are.

[-] Patch@feddit.uk 3 points 9 months ago

Star Labs disable IME by default.

[-] taanegl@beehaw.org 3 points 9 months ago* (last edited 9 months ago)

AMD and ARM also have their remote standards, but none as distrusted as IME.

Also, remember that vulnerability where IME could be enabled through the internet by a malicious actor? That was fun...

Linux

Rules

Related Communities