On Tuesday, 15 September 2020 at 01:13:13 UTC+8 [email protected] wrote:
> The cloud-based aspect of Chromebooks means that in those situations where > you don't consider you have much local on-site security, you can gain extra > security by keeping things in the cloud, and using cloud software. I cover > some of the reasons why this is the case, in the "Sandboxing and cloud > computing" section I wrote in the End-user Computer Security book hosted on > Wikibooks (which can be accessed here > <https://en.wikibooks.org/wiki/End-user_Computer_Security/Main_content/Software_based#Sandboxing_and_cloud_computing> > ). > > Otherwise, Chromebooks can have security advantages because they use an > open-source secure custom BIOS/UEFI known as Coreboot. Vendor-supplied OEM > pre-installed closed-source BIOS/UEFI firmware can pose a security > vulnerability--they can also be hard to replace with a custom firmware > (which I'm particularly finding at the moment). Some info on the security > aspects of custom BIOS/UEFI firmware can be found here > <https://en.wikibooks.org/wiki/End-user_Computer_Security/Main_content/Software_based#Security_of_BIOS/UEFI_firmware> > . > > That said, I definitely have security concerns over using the cloud. > Keeping things on-site would probably be ideal in the case that you have > strong on-site security. > Hi Mark, I've read your wiki entries and enjoyed them--thanks for taking the time to share the information. I just want to clarify that Chromebooks do have local storage and that this can be completely isolated from the cloud (and usually is). This means I can choose not to be at the mercy of the cloud and the condition of my internet connection. Also, I've been looking for evidence that Chromebooks generally have Coreboot installed several years ago before using Chromebooks and now after reading your article. I've failed to find any so far, aside from sites like MrChromebox that mentions older devices. I know that there are ARM Chromebooks, but from a business point of view I don't really see why Google would feel the need to replace ME with Coreboot for the wide variety of CPUs in their devices (though I wish it were true). -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3579f8bf-372f-44b8-8d32-cb06cd15f498n%40googlegroups.com.
