That should be first sentance in README so people know it works.

Pixel 7a is more expensive than Pixel 8a???

I know KDE is the most similar to windows but I would never install it due to 2 reasons:

• too many options for them
• too many options for me (the support guy)

Nope, I’m not doing that. If they want that, they can do it themselves.

I’m 100% sure that Raspberry Pi has that. I can set how much of ram will go for the gpu. But raspberry pi’s gpu isn’t really a gpu.

They are stored behind luks and I think they are readable only by root. But bootkit can probably only infect UEFI from Linux that is running on that machine. And to interact to UEFI you probably have to be root, right?

I’ll look into more options, either store keys on a seperate luks usb key or on a hardware securety key like Nitrokey. For sbctl there is already a roadmap feature for hardware security keys, I hope this comes soon :)

100% if you have enabled “Safe browsing” (which is enabled by default). This also applies to Firefox, but I don’t know if there is enabled by default.

Well… if you have your own keys (like I do) you have to store them somewhere. That somewhere is probably somewhere on a computer where they are used so you can update the kernel. If you have private keys, you can probably bypass secure boot.

Is there a way to have private keys stored on a nitrokey that has to be plugged in for every kernel update?

We can switch ISP???

Yes, Tor recently made a change to that. This does increase fingerprinting but not by much. A lot of Tor users are using Linux rather than Windows.

Thats the important part ;)

Monero

Favourite: GrapheneOS

Others that I like: Monero Librewolf SimpleLogin MullvadVPN PiHole

Arch, you can fully customize it to your needs, and has access to AUR for more hacking tools.

Proton does but only paid version and not free.

I like it but it seems they have to crawl a bit more.

I use monero online and cash offline, because no one accepts monero offline.

I was usimg TPM on my Arch laptop, but then I swizched to a fido device - nitrokey.

Actually you can already run minecraft PE on linuc for quite some years, so nothing new.

Looks fantastic but how much are apps sandboxed? I don’t want WhatsApp to see all my files for example.