get a canoebooted x230 running parabola openrc and a librecmced wndr3800. swap out the wifi card for a ath9k one. use gnu icecat with adguard/ublock. get airvpn for general web browsing and switch to mysterium for when they block data center ip's. have your computer set up so that it doesn't get a internet connection if it's not connected to a vpn.
you'd be smarter to use desktop mode on grapheneos because linux is a pos insecure shit and x230 is a a swiss cheese x86 shitbookthis is like horoscopes but for autistic men
>>108736610>blobsno thanks, enjoy your botnet and spyware
>>108736604lol that's just being a free software purist, wtf does that have to do with opsec?>posted from my librebooted T480
>>108736633in order to have good opsec you must be able to trust the software that's running on your computer and you can only do that with floss software
>>108736633>librebootstill contains blobs, not free
>>108736641New "opsec" is:>in order to trust your system, everything is routinely assessed by ai agentsUnfortunately, hardware is way far away from this.
>>108736610>x230 is a a swiss cheese x86 shitbookThat's by design, you fucking moron. The holes are there so if you spill liquid on your keyboard it just runs through the laptop. the absolute fucking state of /g/ in 2026
>>108736723it's a cool feature but how hard is it to not eat/drink around your laptop?
>>108736733It's literally impossible, seeing as you'd die without food and water.
>>108736748you're using your laptop 24/7?
>>108736754>thinks one can achieve true freedom without using the integrated handcuffngmi
>>108736604Lol. Canoeboot on the x230 leaves Intel ME present on the machine, unlike libreboot which removes it almost completely. Canoeboot is a retarded boot firmware option that follows the completely illogical free software ideology that a device with preinstalled outdated insecure firmware that is actually harmful to the user is better than distributing anything that contains or handles proprietary code, even though it makes the device much more private, secure and even free.It's so incomprehensibly stupid, its almost impossible to imagine people actually live by this flawed ideology.Canoeboot can only make sense on devices where ME can be completely removed like the x200. And even then its dumb because it uses the preinstalled, old, insecure and broken proprietary CPU microcode instead of using an updated one that fixes multiple stability and security issues.Same goes for librecmc BTW. It uses built-in proprietary firmware for the WiFi chips, instead or shipping the firmware with OS. You're better off using openwrt and updated firmware with security fixes.
>>108736819>Canoeboot on the x230 leaves Intel ME present on the machine, unlike libreboot which removes it almost completely.yes and it disables it so that it becomes inactive>Canoeboot can only make sense on devices where ME can be completely removed like the x200.wrong>And even then its dumb because it uses the preinstalled, old, insecure and broken proprietary CPU microcode instead of using an updated one that fixes multiple stability and security issues.the microcode on the cpu is much smaller than the updated miccrocode that intel ships, one would conclude that the increased size means an increase on spyware/botnet>Same goes for librecmc BTW. It uses built-in proprietary firmware for the WiFi chips, instead or shipping the firmware with OS. You're better off using openwrt and updated firmware with security fixesall lies, librecmc uses the open source ath9k firmware just like parabola does and it does not use the firmware that's on the chip.
>>108736819nsa hands typed that
>>108736859Librecmc on the WNDR3800 does NOT use libre ath9k firmware. Those only work on the AR7010 and AR9271 USB chips. Even that "libre" atheros chip that is in your laptop uses built-in proprietary atheros firmware. FSF and their idiot followers try to hide this from you. Librecmc also leaves the proprietary vendor bootloader intact.
>>108736950Anything using rare drivers is a headache for the nsa.
>>108736950>lies againThe wndr3800 just like my x230 uses the ath9k driver and the "firmware" if it would use it (it won't) is just a 1kb rom on the microcontroller
til that the nsa is most concerned with keeping intel microcode updates installed.
>>108736983So please link me the firmware your devices are using. Because the only libre atheros firmware is open-ath9k-htc-firmware which only work on the AR9271 and AR7010 USB chips. They don't work on any other atheros chip like the one that's in your laptop (most probably the AR9382) or in your router (AR7161). They both use firmware built-in the hardware.You have been lied to by the freetards. I'm sorry.
>>108737062But, you work for the nsa. So you're paid to say that.
>>108736754No. I have to sleep, too.
>>108737178First of all, all this information is easily verifiable. Second of all people like Leah Rowe (developer of libreboot and canoeboot) and Daniel Micay (developer of GrapheneOS) say the exact same thing. Believing built-in known insecure proprietary software is better than updated proprietary software with known vulnerabilities fixed is just pure delusion. Pretending its not there is the freetards way of coping.
