C03 · Decision

Why Debian for a Privacy Laptop (and Where Tails and Qubes Fit)

5:16Why This, Not That

Nothing loads from YouTube until you press play. The video then plays in YouTube’s privacy-enhanced mode.

Watch on YouTube

Why the Communication Suite's laptop runs Debian rather than Ubuntu or Windows, what Tails and Qubes are for, what full-disk encryption protects and why the rule is shut down, never sleep, how Secure Boot and a firmware password close the five-minutes-alone attack, and why Mullvad Lockdown is the laptop's own kill switch.

What you’ll learn

  • Know why Debian beat Ubuntu and Windows
  • Know the roles of Tails and Qubes
  • Know what LUKS and Secure Boot protect

Chapters

The honest limits

Secure Boot and a firmware password are not a defence against a sophisticated hardware implant. The encrypted disk protects a powered-off laptop only. Lose the disk passphrase and the laptop is unrecoverable.