jungleben

joined 1 year ago
[–] jungleben@infosec.pub 2 points 1 year ago

If distros signed the bootloaders with their own keys, then I would configure my system to only use those keys and not include Microsoft’s.

[–] jungleben@infosec.pub 2 points 1 year ago (4 children)

12th gen alder lake seems much better at s0 sleep than my 8th gen one. Less battery drain.

[–] jungleben@infosec.pub 1 points 1 year ago* (last edited 1 year ago)

I've looked into the hardware disk encryption before. The problem that it has with Linux is it isn't compatible with secure boot OOTB and could cause sleep issues. That's just the nature of OPAL 2 disks. I'm curious to see what they will do, but then the security is up to the TPM chip and the BIOS.

[–] jungleben@infosec.pub 5 points 1 year ago

I've had fTPM issues with the bios because I changed CPUs and lost key attestation. Maybe it's my fault, but the reset process isn't documented anywhere clearly and it's not worth digging up my old CPU to reset the Mobo.

[–] jungleben@infosec.pub 1 points 1 year ago (1 children)

Graphene has been good at getting security and feature updates out the door quicker. For that reason (and that google telemetry will happen no matter what OS), it's much more secure.

[–] jungleben@infosec.pub 5 points 1 year ago (2 children)

I need to settle on one for a bit. I like Fedora for it’s edge stability and embracing newer secure technology. But, I will be shifting to Debian 12 or Ubuntu LTS because I need to get real work done. I like Pop and Mint, but they don’t have secure boot which I desire.

I’ll probably enjoy arch when I get the time to play with it more.

[–] jungleben@infosec.pub 2 points 1 year ago (1 children)

Holy cow I will test this later. My touchpad even on a regular DPI display goes crazy sometimes.