I want to buy a privacy laptop but i cant really decide which one is the best between purism librem, insurgo privacybeast, and nitrokey
That’s interesting: thank you.
If you want advice, you must provide more information. E.g. -
What is it you want from your laptop?
What type of applications do you want to run?
What are your priorities?
What is your budget?
Where are you based?
Give us something to work with.
I never presume to speak for the Qubes team.
When I comment in the Forum or in the mailing lists I speak for myself.
- Security
- N/A
- Privacy and security
- Im down to spend up 2000-3000 USD
- EU
There’s no “best” laptop as it depends on your own requirement and expectations.
Personally since I love supporting Open source projects I bought several laptops from Insurgo and Purism.
So there’s my own opinions :
- I’ve always had a good relationship with Insurgo. The delivery was very quick. I feel like they are honest.
I really never really had any problems and the only time I had, customer service was there.
So yes I’d recommend this company without worries.
With Purism it’s just the opposite . I have never seen a company as dishonest as this one.
Although I have supplied several HCLs and have always said that personally I had no problem with the Librems hardware that I have and had, the reviews on this company are completely different things.
First I had to wait more than 2 years to receive my Librem 14 v1. I asked several times to cancel the order for a refund but it was never accepted. The delivery was even longer for my Librem 15 v4
I’m not the only one saying that Purism’s customer service is very bad. You can see all the posts on Reddit about this subject. How the hell do you people stay in business? Not for long I suspect.
I like to put it honestly, this company is into over marketing “Privacy” BS without actually saying it the way it should.
They take people for idiots. It works with those who don’t have much knowledge in the subject, but it’s not the case for everyone.
A perfect example is simply the fact that they sell their “Librem 5” and add “A Security and Privacy Focused Phone.”
Any security expert knows that those claims are completely false and misleading.
And yes, any up-to-date Android smartphone is much more secure than this scam.
The same could be said for their laptop. The only thing they did on their latest Librem 14 v1 is to disable (not completely) the IME via the HAP bit that was found by Dmitry Sklyarov HAP Bit . They also developed PureOs which is actually not really secure as they try to advertise.
I’m sure that without proper security mechanims we can’t expect our computers to be private. Security mechanisms are essential for ensuring privacy in today’s digital age.
No “Privacy” “Private computer” can be achived without Security.
I could go on much longer but that’s not the point of the question…
For these reasons I find this company to be extremely dishonest. They really have to take people for idiots to have the audacity to say that their Librem 14v1 is the most secure computer in the world.
Also we shouldn’t forget the past drama with Qubes Os, hoping to save money on their certification laptops.
Note that I’m not really a beginner in bios moding, I myself contributed to develop a lot of projects. Therefore I have several computers at home where I install and test firmware myself and don’t need any company for installing Free open source firmware on my computer.
But as said above, it is my duty to support the projects that seem interesting to me for the community.
You can provide more infomations about what are your requirements for a laptop running Qubes Os.
Does it has to be a laptop?
Thank you so much for the detailed response, the reason i considered purism was beacuse of Pureboot, which i thought would add an extra layer of security.
No, i would prefer a laptop but its not necessary, my main concern is security
You’re very welcome
Every computer has it’s own downsides. That being said, there are some computers that are known to work better than others with Qubes.
Novacustom laptops are very promising.
-
They offer very powerful laptops.
-
Based in the Netherlands, so delivery should be very quick.
-
They provide Open source firmware with the Dasharo/Coreboot UEFI on some models like the NS70 Series
-
They ship some laptops (NS51 Series) with the CSME =(Intel management Engine) disabled.
They seems to be honest, they don’t pretend to do what they can’t do. Wessel klein
(NovaCustom Ceo) seems to be a nice guy
Keep in mind that I haven’t bought any of their laptop, so my recommendation are only based on others reviews. One of my friend bought the NS70 laptop that he received withing 3 days, and he’s very happy with it. (He is not running Qubes Os tough!)
Also you should know that some kind of human being change their behaviors, policies when they see millions of dollars in front of them. That’s an important information to keep in mind.
My top recommendation would be ThinkPads, known for their exceptional robustness, Linux/Qubes Os compatibility and durability.
-
The powerful Lenovo ThinkPad P51 which is part of the community-recommended list
-
The Lenovo ThinkPad T480 which has a good history working with Qubes Os.
HCL Report
There’s no need to buy your computer from a “Privacy” company to have a private computer.
You may also be interested in the new Qubes-certified Desktop which I ordered the last month but still not delivered.
I hope that those recommendations will help you find what’s best for you. You should do your own research as you’re the only one that know what you’ll do with your computer.
Don’t solely rely on opinions from strangers on the internet, like me.
X2100 from xyte.ch
Thank you again for the detailed response, u helped me a lot
@sabindev If you would like some extra privacy/security (by sacrificing some of performance), you may consider the AMD no-PSP coreboot-supported PCs like Lenovo G505S : quad-core A10-5750M CPU and up to 16GB RAM , no Intel ME / AMD PSP, works fine with Qubes thanks to a working IOMMU, and doesn’t suffer from Intel-only 20+ vulnerabilities like Meltdown and Zombieload (for which the security-crippling patches are required and even have to disable the Hyperthreading). You may also consider A88XM-E desktop board with A10-6700 / A10-6800K CPU , etc. Also, check out my earlier posts about these matters
Late to the party, but I want to share my experience with the Purism Librem.
The Wi-Fi card is connected via PCI. This is a good thing on first sight. But then, there is the button to deactivate it. The QubesOS kernel does not support hot plug. Yes, you can disable the card while the system is running. Yes, you can re-enable it while the system is running. But, you have to enable it when booting up the system. If you forgot to do so, you have to reboot due to the lack of hot plug.
Any one considering buying from Purism might like to factor in that ,
once again, they are raising shareholder funds to buy inventory, with
long wait times on delivery.
I’ve made my views on the company clear in the past. This doesn’t look
like a business I would want to risk my money with just now.
Regrettably I came to the same conclusion too late.
I’m reasonably happy with my librem 13 (it’s slow, but not broken), but my phone is a $2000 paperweight because it won’t work on my network. All that after extra years of waiting.