C03 · Decision
Why Debian for a Privacy Laptop (and Where Tails and Qubes Fit)
Nothing loads from YouTube until you press play. The video then plays in YouTube’s privacy-enhanced mode.
Why the Communication Suite's laptop runs Debian rather than Ubuntu or Windows, what Tails and Qubes are for, what full-disk encryption protects and why the rule is shut down, never sleep, how Secure Boot and a firmware password close the five-minutes-alone attack, and why Mullvad Lockdown is the laptop's own kill switch.
What you’ll learn
- Know why Debian beat Ubuntu and Windows
- Know the roles of Tails and Qubes
- Know what LUKS and Secure Boot protect
Chapters
The honest limits
Secure Boot and a firmware password are not a defence against a sophisticated hardware implant. The encrypted disk protects a powered-off laptop only. Lose the disk passphrase and the laptop is unrecoverable.