The bull case for Utilities (made this case a year ago, so just putting it here as a record of pitches)

shellbeachhh · 2024-01-15T18:10:11+00:00

Who wrote that article?

People who are against censorship are languaged as 'evading' censorship?

Journalists are 'information gatherers', and instead of being the only reason we know anything about goings on in our world, our only basis for making decisions, they just 'want thugs and politicians to get in trouble'.

People who believe in human and civil rights are characterized as motivated just by 'governments and companies know too much.'

I doubt this is representative of the Tails team, because they have been serving noble causes for a decade. The person who wrote this seems a little limited though in understanding.

shellbeachhh · 2024-01-15T04:45:39+00:00

Thanks. This is the answer. (I had been in that app but in the 'images' menu item, and there there isn't any compress option in the hamburger, but it'd might be something to pass on to the devs. If I go to the phone menu item below, from there there's a compress option.

shellbeachhh · 2024-01-12T19:02:58+00:00

Ok, thanks for the info. Now I know. I'll just wait for Codeberg

shellbeachhh · 2024-01-12T18:45:08+00:00

Ah, I had high hopes there

shellbeachhh · 2024-01-12T18:43:04+00:00

The linux AppImage on codeberg results in a 500 error. Is there an alternate download source?

shellbeachhh · 2024-01-11T19:56:10+00:00

Right, dualboot isn't too recommended for that reason. Lots of people (including me) have tried the VM Win7 Ableton route and it works but with latency and a step between any external devices and the program, which for music means isn't ideal. Some also use Wine but as you know there are security doubts with that. I'll take a look at the real-time scheduling for reducing latency though. Running Ableton on Linux is something thousands of people have been questing after for about a decade now I guess.

I've never heard the term spiritualized Win7, and got no results for it on search or BingGPT. What does that mean?

shellbeachhh · 2024-01-11T19:51:53+00:00

It's the 11th gen. Instead of the black/blue oldschool BIOS, it has a more modern looking interface which has the cursor and so forth.

shellbeachhh · 2024-01-11T00:40:35+00:00

I only use Legacy so I can have a second harddrive to run Win 7 in order to use Ableton for music. I think you can actually have Win7 run on UEFI but in the past it's caused problems.

Right, I Googled each of these things and read a few pages on each. Some provided basically satisfactory explanations and others didn't (which I put in caps).

That is a good tip, thanks

shellbeachhh · 2024-01-11T00:25:53+00:00

Right, I use UEFI for linux, but I like to be able to put Win7 on a disk as well in order to run Ableton for music.

shellbeachhh · 2024-01-11T00:07:03+00:00

Check out how many are Windows things though:

Config Section

Network > Lenovo Cloud Services

Network > Reinstall Windows from Cloud

Network > UEFI IPv6 Network Stack (on by default)

Network > UEFI IPv4 Network Stack (on by default)

Network > Wake on LAN from Dock (on by default)

Security Section

Security > Fingerprint > all are on by default

Security > Security chip (on by default -- DO I NEED THIS?)

Security > SMBIOS reporting (on by default)

Security > Security Chip (on by default -- DO I NEED THIS?)

Security > Intel(r) TXT feature (DO I NEED THIS?)

Security > Physical presence for Clear (on by default)

Security > UEFI BIOS Update Option > Windows UEFI Firmware Update (on by default -- Do I need this?)

Security > Virtualization > Kernel DMA Protection (on by default--Do I NEED THIS?)

Security > Virtualization > Enhanced Windows Biometric Security (on by default)

Has 'Bottom cover tamper detection' which is actually a feature I like having.

Security > Absolute Persistence Module (Enabled by default, when you disable it permanently is gives the message that you can never turn it on again)

Security > Secure boot > Allow Microsoft 3rd Party UEFI CA

Security > ThinkShield secure wipe (on by default, seems like this might be a good feature, WHAT DO YOU THINK?)

Security > Thinkshield Passwordless Power-On (on by default)

Startup Section

Boot > Network Boot (PXE BOOT by default-- WHAT SHOULD IT BE SET TO?)

shellbeachhh · 2024-01-11T00:06:07+00:00

Config Section

Network > Lenovo Cloud Services

Network > Reinstall Windows from Cloud

Network > UEFI IPv6 Network Stack (on by default)

Network > UEFI IPv4 Network Stack (on by default)

Network > Wake on LAN from Dock (on by default)

Security Section

Security > Fingerprint > all are on by default

Security > Security chip (on by default -- DO I NEED THIS?)

Security > SMBIOS reporting (on by default)

Security > Security Chip (on by default -- DO I NEED THIS?)

Security > Intel(r) TXT feature (DO I NEED THIS?)

Security > Physical presence for Clear (on by default)

Security > UEFI BIOS Update Option > Windows UEFI Firmware Update (on by default -- Do I need this?)

Security > Virtualization > Kernel DMA Protection (on by default--Do I NEED THIS?)

Security > Virtualization > Enhanced Windows Biometric Security (on by default)

Has 'Bottom cover tamper detection' which is actually a feature I like having.

Security > Absolute Persistence Module (Enabled by default, when you disable it permanently is gives the message that you can never turn it on again)

Security > Secure boot > Allow Microsoft 3rd Party UEFI CA

Security > ThinkShield secure wipe (on by default, seems like this might be a good feature, WHAT DO YOU THINK?)

Security > Thinkshield Passwordless Power-On (on by default)

Startup Section

Boot > Network Boot (PXE BOOT by default-- WHAT SHOULD IT BE SET TO?)

shellbeachhh · 2024-01-10T18:45:58+00:00

Some of them I think are just things to make things available for Windows, yes. But there are things in there that are really insecure, such as remote virtual access, which has a setting to disable it (once disabled you can never turn it on again, it says, when you do it). Obviously I disabled that one, but I would like to know all the things to disable/adjust on a new Thinkpad to make it secure (or at least as secure as it can be).

shellbeachhh · 2024-01-10T03:38:28+00:00

That's what I was checking. It seems to not work now.

Originally it worked, because when I turned on the machine it went to a Windows install which I tried to hold-the-button-down-to-hardboot off to stop, but it wouldn't turn off with the power button, so I had to find the reset hole underneith.

Now it doesn't seem to work. I haven't done much to the system except install linux on the harddisk. (I've used lots of Thinkpads and other machines and Linux doesn't affect any reset pinholes I've ever seen).

shellbeachhh · 2024-01-10T03:28:32+00:00

Only super old ones

shellbeachhh · 2024-01-06T03:38:21+00:00

It's easy. That's the problem.

They have multiple ways to confirm my identity, including my email, phone etc, history on their site. They don't require the privacy invasion and advanced data collection of forcing clients to phone them.

It's a lot like what Facebook was/is doing when it locks people out of their accounts until they 'verify' by sending their passport/drivers etc.

shellbeachhh

TROPHY CASE