I won't feed trolls. But will invite you to find me comparative prices for grade A x230 i7 2.9ghz of the same specs. Those are not 200$ CAD, but 940+ (with IPS, 16GB RAM, 250GB SSD and Atheros card) + 80$ for a Librem Key (80$CAD) which will visually attest integrity of firmware at each boot, while permitting to sign boot configuration changes and attest that you approved the changes. Added to that price is 500$CAD for the service made on the laptop to neuter Intel ME, flash the rom, preinstall QubesOS and latet updates, preinstall a Windows7 TemplateVM that you can activate over Windows activation phone line. While permitting to have provable integrity, to attest to you that the laptop haven been tampered with in transit, added with a tamper evident sticker on the main screw of the laptop, required to unscrew to access internal hardware.
Compare prices for yourself. You will find used hardware requiring fan/cpu thermal paste reaaplication, broken cases, 8GB memory equipped laptops with spinning HD without IPS screen. Please challenge me: https://insurgo.ca/produit/qubesos-certified-privacybeast_x230-reasonably-secured-laptop/ My goal is to start a workers/buyers cooperative with this, charging an additional flat fee on top of hardware cost for what is done on the refurbished hardware. That money is my salary and personal funding source to pay for other knowledgeable work, pay for QubesOS development and for sure, also pay myself so I do not have have a job outside of this and dedicate myself to open hardware and projects that need money to go forward, while continuing to do security trainings for right defenders, that need this kind of tool, btw. OEM reownership in action, permitting QubesOS preinstallation on "slightly more secured hardware" (Heads moto): https://archive.org/details/activateoemreownership The more refurbisher sources of high end and grade A hardware, the best prices users will get. Finding a secure source for that model was not an easy task. Try it for yourself. You will see. Its quite easy to find one super deal. Finding a provider is a different story. If you find one, contact me, you might become a distributor for your own country! Doing the OEM reownership to make QubesOS preinstallable was not an easy task either. https://github.com/osresearch/heads/pull/551 QubesOS certification was made bridge the gap on having QubesOS preinstalled, which never happened, even if it was supposed in the past. To finally promote QubesOS preinstalled machines, without compromising encrypted keys, while promoting my first move torward "Accessible security", project for which grant was received. Else users are redirected on the HCL page and not all people are technical enough to even choose the right hardware, even less ones that can boot from Open Source Firmware. And enven less of them will arrive to the point of having a provable root of trust. All of this work was made open source, and can be ported to other models and platforms, which I would really love to see happen though the Heads project. I also did the port for the KGPE-D16/KCMA-D8, which you can find on the Heads github site, which has OpenBMC iKVM module, can be used a QubesOS server and can be remotely booted, with provable root of trust through iserted Librem Key. You are more then welcome to join forces instead of criticizing in a nonconstructive way. I'm doing my best to pay myself back 2 years of development and laucnhing this all by myself. Now is a time for collaboration to make QubesOS more accessible to freedom defenders, journalists and others who needs this the most. I will do some of that development myself, made grant paper workto be able to pay other people's work and plan on doing that until we have something free to propose to the masses, which supports QubesOS. If you are knowledgeable/technical enough to be able to do it yourself and be able to own provable boot security, then you are more then welcome to do it yourself or be helped by a friend. If you are not in that situation, that is why I did that work and to be able to promote such solutions in my own security trainings for organizations and journalists. If you want to support my work, you are more then welcome to do it, by proposing collaboration and support other hardware through Heads or other Open Source Firmware where the same reownership logic could apply and guarantee integrity/security/confidentiality and in transit tamper evidence. As all of you, I would prefer promoting more performant hardware to the masses, but i'm not compromising myself in promoting FSP binary-blob dependent hardware initialized by non-free Coreboot, nor non-neuteured Intel ME or AMD equivalent crap running by default, or simply asked to be deactivated while binary blobs are still there in SPI flash. Cheers, Thierry/Insurgo Le mercredi 24 juillet 2019 13:54:53 UTC-4, travorfi...@gmail.com a écrit : > > Guyz, this is not serious. > > >100$ laptop > >chink keyboard > >lost battery > >flashed with a $5 ch341a coreboot > > > среда, 24 июля 2019 г., 20:48:11 UTC+3 пользователь Thierry Laurion > написал: >> >> >> >> On Wed, Jul 24, 2019 at 1:16 PM <travorfi...@gmail.com> wrote: >> >>> >sandybridge >>> > >>> >>> $1,581.00 >>> >>> laught high. >>> >> I can understand seeing the total price. The reality is 946$CAD, though >> for the Grade A refurbished laptop i7 2.9ghz, 16GB ram, 256Gb SSD drive and >> IPS screen. See product description. You pay an additional 500$CAD to have >> integrity attestation of firmware and QubesOS preinstallation, while >> supporting what I try to accomplish. >> >> Else you can do it yourself from locally available hardware, but I doubt >> you can find equivalent quality refurb grade A equivalent hardware with >> competitive price. >> The OEM Re-Ownership wizard in action, with important links and >> references: https://archive.org/details/oemuserreownership >> >> Regards, >> Thierry Laurion/Insurgo >> >> >>> >>> >>> пятница, 19 июля 2019 г., 7:19:37 UTC+3 пользователь Andrew David Wong >>> написал: >>>> >>>> -----BEGIN PGP SIGNED MESSAGE----- >>>> Hash: SHA512 >>>> >>>> Dear Qubes Community, >>>> >>>> We are very pleased to announce that the Insurgo PrivacyBeast X230 [1] >>>> has passed Qubes 4.0 Hardware Certification and is now a >>>> Qubes-certified >>>> Laptop! [2] >>>> >>>> ## What is Qubes Certified Hardware? >>>> >>>> Qubes Certified Hardware [3] is hardware that has been certified by the >>>> Qubes developers as compatible with Qubes OS. Beginning with Qubes 4.0, >>>> in order to achieve certification, the hardware must satisfy a rigorous >>>> set of requirements [4], and the vendor must commit to offering >>>> customers the very same configuration (same motherboard, same screen, >>>> same BIOS version, same Wi-Fi module, etc.) for at least one year. >>>> >>>> Qubes-certified Laptops [2], in particular, are regularly tested >>>> by the Qubes developers to ensure compatibility with all of Qubes' >>>> features. The developers test all new major versions and updates to >>>> ensure that no regressions are introduced. >>>> >>>> It is important to note, however, that Qubes Hardware Certification >>>> certifies only that a particular hardware *configuration* is >>>> *supported* >>>> by Qubes. The Qubes OS Project takes no responsibility for any >>>> manufacturing or shipping processes, nor can we control whether >>>> physical >>>> hardware is modified (whether maliciously or otherwise) *en route* to >>>> the user. (However, see below for information about how the Insurgo >>>> team mitigates this risk.) >>>> >>>> ## About the Insurgo PrivacyBeast X230 Laptop >>>> >>>> The Insurgo PrivacyBeast X230 [1] is a custom refurbished ThinkPad X230 >>>> [5] that not only *meets* all Qubes Hardware Certification requirements >>>> [4] but also *exceeds* them thanks to its unique configuration, >>>> including: >>>> >>>> - Coreboot [6] initialization for the x230 is binary-blob-free, >>>> including native graphic initialization. Built with the >>>> Heads [7] payload, it delivers an Anti Evil Maid (AEM) [8]-like >>>> solution built into the firmware. (Even though our requirements [4] >>>> provide an exception for CPU-vendor-provided blobs for silicon and >>>> memory initialization, Insurgo exceeds our requirements by >>>> insisting >>>> that these be absent from its machines.) >>>> >>>> - Intel ME [9] is neutered through the AltMeDisable bit, while all >>>> modules other than ROMP and BUP, which are required to initialize >>>> main CPU, have been deleted. [10] >>>> >>>> - A re-ownership process that allows it to ship pre-installed with >>>> Qubes OS, including full-disk encryption already in place, but >>>> where the final disk encryption key is regenerated only when the >>>> machine is first powered on by the user, so that the OEM doesn't >>>> know it. >>>> >>>> - Heads [7] provisioned pre-delivery to protect against malicious >>>> interdiction. [11] >>>> >>>> ## How to get one >>>> >>>> Please see the Insurgo PrivacyBeast X230 [1] on the Insurgo website >>>> [12] >>>> for more information. >>>> >>>> ## Acknowledgements >>>> >>>> Special thanks go to: >>>> >>>> - Thierry Laurion [13], Director of Insurgo, Technologies Libres >>>> (Open >>>> Technologies), for spearheading this effort and making Heads+Qubes >>>> laptops more broadly accessible. >>>> >>>> - Trammell Hudson [14], for creating Heads [7]. >>>> >>>> - Purism [15], for greatly improving the UX of Heads [7], including >>>> the GUI menu, and for adding Nitrokey [16] and Librem Key [17] >>>> support. >>>> >>>> >>>> [1] >>>> https://insurgo.ca/produit/qubesos-certified-privacybeast_x230-reasonably-secured-laptop/ >>>> >>>> [2] >>>> https://www.qubes-os.org/doc/certified-hardware/#qubes-certified-laptop-insurgo-privacybeast-x230 >>>> >>>> [3] https://www.qubes-os.org/doc/certified-hardware/ >>>> [4] >>>> https://www.qubes-os.org/doc/certified-hardware/#hardware-certification-requirements >>>> >>>> [5] https://www.thinkwiki.org/wiki/Category:X230 >>>> [6] https://www.coreboot.org/ >>>> [7] https://github.com/osresearch/heads/ >>>> [8] https://www.qubes-os.org/doc/anti-evil-maid/ >>>> [9] https://libreboot.org/faq.html#intelme >>>> [10] >>>> https://github.com/osresearch/heads-wiki/blob/master/Clean-the-ME-firmware.md#how-to-disabledeactive-most-of-it >>>> >>>> [11] https://en.wikipedia.org/wiki/Interdiction >>>> [12] https://insurgo.ca >>>> [13] https://www.linkedin.com/in/thierry-laurion-40b4128/ >>>> [14] https://trmm.net/About >>>> [15] https://puri.sm/ >>>> [16] https://www.nitrokey.com/ >>>> [17] https://puri.sm/posts/introducing-the-librem-key/ >>>> >>>> This announcement is also available on the Qubes website: >>>> >>>> https://www.qubes-os.org/news/2019/07/18/insurgo-privacybeast-qubes-certification/ >>>> >>>> >>>> - -- >>>> Andrew David Wong (Axon) >>>> Community Manager, Qubes OS >>>> https://www.qubes-os.org >>>> >>>> -----BEGIN PGP SIGNATURE----- >>>> >>>> iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAl0xRMEACgkQ203TvDlQ >>>> MDAEVQ//d5Ziw78qjjYCaepSpJTXwdlw6yiZVXm5ecB1xYMdS7UrQJYX3vS/on/R >>>> i4Sh/fuQBfr5qzap8BHK7DyZ3IJYFjazVPkXStKk5gYrx2ZCD+/3xMNwKYNn9Old >>>> YNf6N5+2ux9WMn39k+E5MJNJOUWuM3VRTTSlJT8YnM4fQR+2pzC7Ugdam24BGUSr >>>> bTz7k/3mbDTDjWAmttzDNTt+pJEB0BkSlms862JqxCLulwwrw3noQk8DGHX1VraD >>>> EY72atFoehSvU8HpeXhjxiCQhPwk/2SktxL5C+W21Z4Jyl+NzLFA2OCf5Bw+wOpp >>>> LJZ6/Y1Gy+FNH8mzD6mNVu23l+x4nlTfSqIHtpw/OnQTxdmMYsWV1Ayn9xONJJB0 >>>> PPEBW24c0NKKD/b2V9R3rfwScLgP4Lc5kfS6KFJItUka4OoZ1cQdGdAX+2X2S0QT >>>> RIW1NUeeqbJHPwSPLTszBs9gGW0mmE26J4D2F8r+ldVgGskOeX9MGJ8qSzBVzOLk >>>> SnhfY9ZXjxyrT4v+QMShu6QJqPwcbFpbS5Lp5ZMS1JAz1fWL8/tbXhCNcTKzl1R7 >>>> mXpjfGjtM9hDFzlD/eMyCFRAW3V16Pk9qcABak5+HEH8py88mnnnyNy4npRYu/Xe >>>> j6VpvWE87DI4vYuUX/F9hKLES5HJZVRdWj5j+9B+riZZuVJOo+M= >>>> =WwYE >>>> -----END PGP SIGNATURE----- >>>> >>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "qubes-users" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to qubes...@googlegroups.com. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/qubes-users/1ac1f957-06e2-40c7-84c5-5112b365848a%40googlegroups.com >>> >>> <https://groups.google.com/d/msgid/qubes-users/1ac1f957-06e2-40c7-84c5-5112b365848a%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> -- >> Thierry Laurion >> > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/deff9ed8-7633-4f8c-8fc2-e291dde25980%40googlegroups.com.
