34 points by CHEF-KOCH 6 days ago | 50 comments
cosmic_cheese 6 days ago
antif 6 days ago
userbinator 6 days ago
Fire-Dragon-DoL 6 days ago
cosmic_cheese 6 days ago
qchris 6 days ago
What they would (and do) sign-off on is a one-time purchase of a desktop from an approved vendor for that desktop, which comes with out-of-the-box support for the NVIDIA GPU I've selected. That's more the niche that I feel System76 is really filling.
Fire-Dragon-DoL 6 days ago
baybal2 6 days ago
userbinator 6 days ago
They don't either. I believe Framework is OEM'd by Compal.
Bjartr 6 days ago
userbinator 6 days ago
Edit: the amount of downvoting the original comment got, and the sibling that got killed for saying effectively the same thing, makes me think someone is trying to push a certain narrative, but the truth is out there. No one except a very small number of OEMs actually designs PC mobos, and they are also based on reference designs from Intel or AMD.
Bjartr 6 days ago
necovek 6 days ago
The main (only?) selling point for NovaCustom is open source coreboot firmware and disabling of Intel ME.
I'd like to see Framework laptop with these features, but those two features do not make a Framework alternative.
fsflover 6 days ago
Also it's officially certified to run Qubes OS.
exiguus 6 days ago
- Disabled IME
- Coreboot EDK or Heads
- Removed Camera and Microphone
- Buskill kit
- Privacyscreen
- Tamper-evident Screws and Packaging
Brian_K_White 6 days ago
zamalek 6 days ago
NVIDIA, though? We are still a good few months, or years, away from attempting to seriously use NVIDIA and Linux in the same sentence without looking like a complete idiot.
rpdillon 6 days ago
I don't feel like a complete idiot, but now you're making me wonder. What's your experience been?
AlotOfReading 6 days ago
Good Linux support though.
bigyabai 6 days ago
yndoendo 6 days ago
bigyabai 6 days ago
1vuio0pswjnm7 6 days ago
If the purchaser does not want Dasharo, they can usually compile their own non-Dasharo coreboot and flash it themselves.
pietrushnic 5 days ago
1. Presentation about Dasharo Revenue Sharing and Dasharo Supporting
https://www.youtube.com/live/ZyctrnJNTPc?si=svfFEO6WXiF3BNqz...
2. Publicly available overview of cooperation models:
https://youtu.be/n2NlymUVYCY?feature=shared&t=115 https://www.youtube.com/live/EN5rBAAOdOk?si=YKrkR28rQE1TyoWe...
https://github.com/Dasharo/presentations/blob/main/archive/d...
Please let me know if anything is missing or if anything is unclear.
transpute 6 days ago
Usually each laptop OEM ships a unique downstream tree and release build of firmware (UEFI or coreboot), optimized for their hardware, similar to the relationship between RedHat/Debian and mainline Linux kernel. Since coreboot is GPL, each Clevo OEM should provide source for their firmware.
princevegeta89 6 days ago
What am I missing here..?
SlowTao 6 days ago
Using open boot and a neutered Intel ME is a good start but nothing too unique nowadays.
Also at this point hardware privacy is all well and good but if you are going to dump stock Windows 11 on it, well it is called Windows for a reason, lets all your data out of one.
ementally 6 days ago
>Framework. vPro Enterprise Framework devices actually meet HSI level 4, but they unfortunately do not handle firmware updates properly. They have not shipped a single firmware for their 13th generation over a year since its release date, and over 6 months since the disclosure of LogoFail. While they do ship some updates for other devices, how they have been handling so far is not acceptable if you need a secure device.
mixmastamyk 6 days ago
fsflover 6 days ago
getcrunk 6 days ago
demarq 6 days ago
transpute 6 days ago
- Clevo ODM laptops with coreboot (OEM: NovaCustom, Purism, System76)
- Some (?) pricy Dell Rugged laptops, at purchase time
- Some (?) standard HP business laptops, via BIOS
speedgoose 6 days ago
SlowTao 6 days ago
But if you don't need to run LLM's these will be fine.
speedgoose 6 days ago
When Apple and AMD sell very descent laptop hardware (M4 or Ryzen AI Max), I find the Intel/Nvidia combo with only 8GB a bit conservative.
marssaxman 6 days ago
I was content with 8GB of main RAM in my dev laptop until about a year ago.
exiguus 6 days ago
marssaxman 6 days ago
mgerdts 6 days ago
pietrushnic 5 days ago
dheera 6 days ago
> We do not use Google Analytics
Why do I care if you use Google Analytics? Doesn't affect the laptop I get. You're free to analyze your site traffic with whatever tool you want. (I block Google Analytics on the client side personally so I really don't care if you use it or not, it's all the same to me.)
> We use Signal and you can reach us via Protonmail.
Again, why should I care what you use within your business? Your business is a black box to me, and the right privacy assumption is to assume the worst about what's inside that black box, rather than try to audit what's used inside that box, and not send privileged information to you in the first place.
> You can buy your laptop with Linux preinstalled.
Yeah, no, I don't trust you to install an OS for me. Since I care about privacy, I would of course install my own OS.
> We setup your operating system with the most privacy-friendly settings. Even if we install Windows!
Nope nope nope
mixmastamyk 6 days ago
iLoveOncall 6 days ago
bigyabai 6 days ago
I swear that hipster marketing has ruined HN's ability to evaluate products. Next you people are going to start bitching about the logo not lighting up.
KerrAvon 6 days ago
Can you elaborate on what you mean by this? The big revelation of the Snowden leaks was that the NSA was spying on Americans, which it isn’t (wasn’t) supposed to do. What does a laptop vendor have to do with it?
horsellama 6 days ago
and also ships with nvidia gpu
I might have found a new laptop…
stavros 6 days ago
umbra07 6 days ago
horsellama 6 days ago
but I meant the actual sticker on the keycap (very silly requirement, I know)
haiku2077 6 days ago