I love my C201, also not very expensive. I opted for the 4Gb version. My first setup was chromeos + crouton then I moved to linux on a sd card. I noticed I never boot into chromeos anymore so I got rid of it.
I have a C201 too...I reflashed the bootloader with libreboot and installed arch linux on it. It it actually quite snappy, and works fine for development!
How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
151–160 of 179 posts
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#152One of the BIGGEST drawbacks using a Chromebook with 11.6 inch screen that nobody here talks about yet, is the grainy and crappy 1366 x 768 screen resolution! I've been a long time Macs guy anything inferior than RetinaDisplay will considerably straining my eyes before I am used to it. Dell XPS 13 included.
1366 x 768 can look quite sharp on an 11". You were probably just looking at a bad screen. AFAICT the reason than even expensive 11" laptops generally don't run higher resolutions is that at that size you can't tell the difference.
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#153One of the BIGGEST drawbacks using a Chromebook with 11.6 inch screen that nobody here talks about yet, is the grainy and crappy 1366 x 768 screen resolution! I've been a long time Macs guy anything inferior than RetinaDisplay will considerably straining my eyes before I am used to it. Dell XPS 13 included.
If you're going to compare to a Mac, it's better to look at the higher end Chromebooks like the Pixel 2, HP Chromebook 13, and Samsung Chromebook Pro. They all have screens with pixel density and quality that's on par with the 15" MacBook Pro I have.
Alas, they also have price tags more on par with a Macbook.
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#154Earlier quoted context omitted.
> Edit; I've been using a de-chromed chromebook for over a year […] Ok, but as the article states, they did not de-ChromeOS it because they wanted TPM and Verified Boot and FIDO-certified U2F security key so that they didn't defeat the whole purpose of buying a Chromebook. FTA: “As far as Debian/Ubuntu (and crouton), that's fine as far as it goes, but then you don't end up with a Chromebook, just a cheap mini-noteboo…
You can have verified boot, and use the TPM and the U2F security key without the chrome os on a chromebook.
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#155Nearly every how-to and blog post I've found on "Chromebooks for developers" essentially starts with either: "Boot into Developer Mode" or "Install Debian/Ubuntu as the main OS". I'll just say it: This is bad advice. It would be akin to recommending that friends jailbreak their shiny new iPhone. You're obviously free to do as you wish with your own gear, but recognize that at Step 1, you'll have lost most of the core…
What threat does the chromebook protect against that isn't fixed by FDE?
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#156Earlier quoted context omitted.
Ok but there are major downsides with this: 1. If I change my plans I have to go back home or go to my original destination to pick up a key to decrypt 2. I might get there before my yubikey arrives 3. An adversary might look at my machine, and know there is data on there (in the chrome book case it just looks like a new machine), they could then detain me indefinitely or travel with me to my destination and force me…
You won't reach alberts-hacker-cloud.com behind the great firewall. The warning message you get from the internet police won't be a pleasant experience either. But try it and learn the hard way. Let the fear and dread wash over when you realize how far away from home you are, and how utterly alone you are in a foreign system.
If it comes to the point where the police gets involved, no level of crypto is going to help you anyway. You'd better try to contact your country's embassy so they can get you out.
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#157Nearly every how-to and blog post I've found on "Chromebooks for developers" essentially starts with either: "Boot into Developer Mode" or "Install Debian/Ubuntu as the main OS". I'll just say it: This is bad advice. It would be akin to recommending that friends jailbreak their shiny new iPhone. You're obviously free to do as you wish with your own gear, but recognize that at Step 1, you'll have lost most of the core…
Just install linux, select full disk encryption, done. What threat does the chromebook protect against that isn't fixed by FDE?
Chromebooks use kernel signing to prevent this. The problem is, Google doesn't give you keys to your hardware so you have to replace them yourself or use devmode which disables kernel verification.
Another possible solution is to keep the kernel on an external, physically secured pendrive and never forget to press CTRL-U during boot (to stop a hypothetical attack involving a malicious kernel installed to the internal flash which exfiltrates your FDE passphrase or something like that).
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#158Earlier quoted context omitted.
If the claim being made was that they track your usage of their products, that would have been a reasonable response. But the claim being made is that they continuously monitor you through the webcam and microphone. That is extremely bold and, may I say, complete tinfoil nuttery.
Why is that so hard to believe? Personalized ads are huge right now, if you could listen in to people's conversations you can use the data to improve your ad conversion rate. If there's ROI in recording and doing the data collection you can bet they have at least experimented with it. Can't imagine what recording webcams would do- but I suppose it might be effective for something.
Because there's no actual evidence to support it.
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#159Earlier quoted context omitted.
If the claim being made was that they track your usage of their products, that would have been a reasonable response. But the claim being made is that they continuously monitor you through the webcam and microphone. That is extremely bold and, may I say, complete tinfoil nuttery.
Why is that so hard to believe? Personalized ads are huge right now, if you could listen in to people's conversations you can use the data to improve your ad conversion rate. If there's ROI in recording and doing the data collection you can bet they have at least experimented with it. Can't imagine what recording webcams would do- but I suppose it might be effective for something.
Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
#160Earlier quoted context omitted.
Or use Duo's mobile app which has no mechanical parts!
The reason people use u2f keys is because they can't be cloned and the key can't be extracted. I too like and use TOTP (with Authy), but it really can't beat specialized hardware.