Will PG recommend a laptop?

[anon49578468]

@pinkandwhite

Framework is actually decent now, there’s a post somewhere else in the forums where someone showed they’ve upped their firmware update game and they meet HSI3 too.

Post linked below had the relevant discussion.

Linux Laptops? System76? Other options?

My recommendation is buy a framework if they exist in your region and/or you can afford it. Small product line means better support, nowadays they have decent firmware updates, and they won’t abandon support for your system suddenly. (HSI 3) Second best would be buying a dell since they have great linux support, deliver firmware on time, and less likely to abandon updates for latitude and other enterprise laptops. (Can go upto highest HSI levels) I would stay away from Lenovo, their linux comp…

I also agree with either framework or dell latitude/precision. Just adding some other context here because I love yapping.

@Eazy

I went with Fedora specifically because of PG’s recommendations

Fedora is a first class citizen in Framework, Ubuntu is what Dell usually support out of the box. I own a framework, and can assure everything works out of the box in fedora, including fingerprint, webcam, etc. Amazing experience. (Every day I become more of a framework shill )

@Eazy

I don’t mind going with something more expensive and geared towards enterprise as long as it doesn’t mean a major loss in usability.

So Dell vPro line usually has very bad specs for the price. If budget is not a constraint, they make sense. But, remember that you WILL need to change laptops once they stop shipping firmware updates for them. This is where I feel framework is an easier recommendation to make (again keeping in mind you said budget is not a problem), since you can always upgrade the platform. Have seen older versions of framework become entirely new laptops by just switching the platform and sometimes RAM (ddr4 from ddr3 for some intel and amd chips). This is unlike dell, where you WILL have to buy a new laptop.

@Satoshi

For other models, you can look at whatever models are supported by Libreboot or coreboot. However, these are generally much older models, mostly old Dell, HP, and Lenovo ThinkPads.

Libreboot is useless for security, Coreboot is a broken approach. (Please read this)

@Satoshi

Some of the manufacturers mentioned above, like System 76, provide options to disable Intel ME.

No one has found a way to disable ME. Most of them are waiting on Purism to crack it, and even Purism hasn’t disabled ME. Anyone selling disabled ME laptops is either not providing a clear definition of what they actually disable, or is a snake oil salesman. Why do you wanna disable ME though?

@Satoshi

It’s not FUD, It’s proprietary tech

Lol, proprietary is not inherently bad. You probably have a phone with hundreds of proprietary parts/code snippets. Your laptop, your infrastructure, your internet runs on patents, proprietary, closed-source software. Part of it also runs on Open Source. Neither actually matters for security.

Why are so many people in the privacy community obsessed with Intel ME, firmware, and other proprietary tech? Is everyone’s threat model a state level actor that can infiltrate Intel, discover a 0-day worth millions of dollars, exploit it on the regular, while no one knows? Please do threat modelling (this is what a proper threat model analysis looks like) for yourself.

[Average_Joe (Joey)]

@Eazy

I’m planning to run Fedora – I was considering Framework but was reading on these forums about security concerns. So maybe I’ll be going with Dell? I’m just not sure how to balance Linux-friendliness with security.

This is the best laptop I’ve been able to find without costing too much.

Dell Precision 3590 Workstation

[bqfls (burger queen, PG (privacy gamer))]

@anon49578468

Fedora is a first class citizen in Framework, Ubuntu is what Dell usually support out of the box. I own a framework, and can assure everything works out of the box in fedora, including fingerprint, webcam, etc. Amazing experience. (Every day I become more of a framework shill )

There are a few ThinkPads listed to have been tested with Fedora over at lenovo.com/linux. Though, a thing to note is that these are very expensive P Series laptops. Also a majority of laptops are tested with Ubuntu versions over there as well.

[bqfls (burger queen, PG (privacy gamer))]

ThinkPad E series laptops are relatively cheap, and reach HSI 3 level for security : LVFS: HSI Device