3 ms·
Hopefully not since you can validate it at a deeper level down to the kernel modules I believe. Thats why they chose this anemic CPU I think: no binary blobs. W
by saturn8601 2y ago
Hopefully not since you can validate it at a deeper level down to the kernel modules I believe. Thats why they chose this anemic CPU I think: no binary blobs. Wasn't Anom encrypted with "trust me bro" style security by obscurity?
Also these guys have an anti-interdiction service thats pretty nifty: https://puri.sm/posts/anti-interdiction-services/ https://puri.sm/posts/anti-interdiction-services/
On the hardware side:
Customized tamper-evident tape on the sealed plastic bag surrounding the laptop itself
Customized tamper-evident tape on the internal, branded box
Glitter nail polish covering the center (or all) screws on the bottom of the laptop
Pictures of all of the above plus pictures of the inside of the laptop before sealing the bottom case
All pictures sent to the customer out-of-band, signed by Purism and encrypted against the customer’s GPG key
All coordination occurring over GPG-protected email
Integration with PureBoot Bundle
On the Software Side:
Shipping the laptop and Librem Key to separate addresses
Postponing shipment of the laptop until the Librem Key is delivered
Configuring the Librem Key and PureBoot with custom, user-provided GPG keys and/or PINs