Re: [linux] someone know or share on securing older devices that no longer receive security updates so they can work a bit longer?

2024-04-05 Thread Eric Marceau via linux
Maybe there is some background that you are not mentioning about the 
machine(s) in question, but ...


My understanding is that

 * Chrome OS is the OS on all Chromebooks,
 * Chrome OS is Google's platform for their attempt at "world
   domination" ,
 * Chrome OS development is alive and well,
 * Chrome OS *ONLY* runs on /certified-compatible/ hardware,
 * Updating an *existing* Chromebook should be /relatively/
   straightforward, (if that hardware model of Chromebook is
   "supported" by a given version of Chrome OS) but you may be forced
   to adopting *ChromeOS Flex*, which is intended to deploy Chrome OS
   features on /non-certified/ hardware, essentially as Google's
   designated path for migration from MS Windows or Apple Mac OS into
   the more robust, flexible and extensible Linux-based environments. 
   Given the nature of ChromeOS Flex, it may be the choice offering the
   widest range of choice for older hardware drivers.

   *PROVISO*:  I don't know anything about what they do for that, but
   it /may be/ a different set of people maintaining the
   device/hardware database for Flex, having their database content
   being a superset of the recently "distilled" database used by the
   remainder of the Linux community.  I could be wrong on that, but I
   don't think so.

   https://www.androidpolice.com/google-chromeos-flex-install-guide/
   
https://cloud.google.com/blog/products/chrome-enterprise/chromeos-flex-ready-to-scale-to-pcs-and-macs

The simplest possible explanation is that some of the hardware component 
manufacturers *have stopped development of the firmware drivers* for 
their particular hardware components (i.e. USB interface, RJ45 
interface, disk drives, etc).  If, however, you can find a supported 
version of firmware (any source) for that hardware, you might be able to 
re-qualify your configuration as an acceptable configuration for 
Google-originating updates.


If not, you will need to pursue other environments in order to find one 
that will provide you with the security coverage you are looking for on 
you specific computer hardware.


Some that might address that need are:

 * *Chomium OS* (the OS from which Chrome OS is built as an overlay
   with Google's customizations; Chromium *does not* have the benefit
   of the "proprietary-code" plugins that Google has licensed as a
   built-in to ship along with Chrome OS);

   https://www.chromium.org/chromium-os/
   https://en.wikipedia.org/wiki/ChromiumOS  (gives a good synopsis of
   evolution)

 * Any one of the Linux distributions; *Debian Linux* being the
   long-time "driver" of the Linux codebase, but *Ubuntu Linux* has
   done significant strides in making it more user-friendly for
   first-timers, as well as a parallel effort for Enterprise-scale
   application development/support (but still open-sourced); I am
   partial to Ubuntu MATE myself.  Note that Ubuntu 24.04 is about to
   be released at end of April (04) of 2024.

   https://www.debian.org/
   https://ubuntu.com/download/desktop

If you are interested, there is also another Linux with a different 
code-base.  Namely, Red Hat Linux.  It was the first to go "mainstream", 
driving the initial wave of LAMP server deployments, way back at the 
dawn of the internet.  It has two flavours,


 * *Fedora Linux* (community-based open-sourced), and

   https://fedoraproject.org/


 * *Red Hat Linux* (proprietary overlay developed for enterprise
   deployment).

   https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux

As for other "derivative" distros, there are almost as many that are 
offshoots from Debian (a.k.a Ubuntu being one) as there are offshoots 
leveraging Ubuntu's modified/enhanced codebase.  It all depends on the 
what *you* prefer in the areas of


 * packaging mechanism (/*very* important consideration/) for
   application packaging and distribution,
 * version development and release cycles,
 * GUI look and feel, and
 * participation and contribution levels of the community in the
   distribution's development and evolution.

You'll have to examine a few different distros to decide whether that is 
what you want to pursue.


I got tired of Windows virus/trojan crap way back and switched to Ubuntu 
Feisty Fawn (version 7, 2007) and never looked back.  Best decision I 
ever made!


I am on Ubuntu MATE 20.04 and am about to make the jumpt to 24.04, but 
need to perform the "upgrade" to 22.04 before doing the one for 24.04, 
as is recommended by Ubuntu.



Bottom line, you might be best to look at an upgrade, or reinstall of 
the latest Chrome OS on your Chromebook, but make sure you make backups 
of any hardware/firmware drivers *BEFORE* doing that, to ensure you have 
the original versions that supported your actual hardware, *AND* look to 
get the latest revisions of those that are supported on the Chrome OS 
*version you install*.


*IMPORTANT*:  To get full support of you Chromebook's hardware, you *MAY 
NOT* be able to go to the 

Re: [linux] someone know or share on securing older devices that no longer receive security updates so they can work a bit longer?

2024-04-03 Thread James via linux




On 2024-04-03 00:27, Michael Goguen via linux wrote:


Does anyone know or share on securing older devices that no longer 
receive security updates so they can work a bit longer?


Can't you install Linux on ChromeBooks?

To unsubscribe send a blank message to linux+unsubscr...@linux-ottawa.org
To get help send a blank message to linux+h...@linux-ottawa.org
To visit the archives: https://lists.linux-ottawa.org



[linux] someone know or share on securing older devices that no longer receive security updates so they can work a bit longer?

2024-04-02 Thread Michael Goguen via linux
Does anyone know or share on securing older devices that no longer receive
security updates so they can work a bit longer?

In particular I'm wondering about using ChromeOS devices like chromebooks
that no longer receive security and other updates to maybe put on developer
mode and tweak to make them a bit more secure and possibly still able to be
updated to stay a bit functional, ie so old google web store apps might
still be able to work, preferred extensions etc and is it still possible
to... set them up so if they have problems you can still wipe them (if for
instance some people like me might otherwise not be able to fix problems
manually) and restore the important bits so it can still keep working
hopefully after a wipe?


Thx


Michael Goguen