3 ms·
It’s just going to be another Anom-style honeypot in the end, isn’t it?
by tokioyoyo 2y ago
It’s just going to be another Anom-style honeypot in the end, isn’t it?
- saturn8601 2y agoHopefully not since you can validate it at a deeper level down to the kernel modules I believe. Thats why they chose this anemic CPU I think: no binary blobs. Wasn't Anom encrypted with "trust me bro" style security by obscurity? Also these guys have an anti-interdiction service thats pretty nifty: https://puri.sm/posts/anti-interdiction-services/ https://puri.sm/posts/anti-interdiction-services/ On the hardware side: Customized tamper-evident tape on the sealed plastic bag surrounding the laptop itself Customized tamper-evident tape on the internal, branded box Glitter nail polish covering the center (or all) screws on the bottom of the laptop Pictures of all of the above plus pictures of the inside of the laptop before sealing the bottom case All pictures sent to the customer out-of-band, signed by Purism and encrypted against the customer’s GPG key All coordination occurring over GPG-protected email Integration with PureBoot Bundle On the Software Side: Shipping the laptop and Librem Key to separate addresses Postponing shipment of the laptop until the Librem Key is delivered Configuring the Librem Key and PureBoot with custom, user-provided GPG keys and/or PINs