Blog

This article is the follow-up of previous linux workstation setup -- basic setup on lenovo laptop blog post. I’ll try to document (opinionated) steps that should make your laptop more secure for this threat model scenarios: someone gaining physical access to the laptop software or firmware vulnerabilities software misconfigurations leading to increased attack surface or privilege escalation DISCLAIMER this is just my private opinion and Your Milage May Vary. Feel free to adjust it according to your needs and your threat model.

This article describes the process for Lenovo ThinkPad X1 Carbon Gen 11 but I think it should be similar to other Lenovo laptops as well. It should be applicable to laptops from other vendors but YMMV. How to choose Linux compatible laptop Some models are well supported by Linux, other require proprietary software and there might be some models that will cause you some headaches. For checking compatibility you might be interested in:

Imagine we have a home network with OpenWRT router, Raspberry Pi server and some IoT devices. Rasberry Pi is our WireGuard VPN service that allows to access our home network resources securely from the internet. It’s probably good idea to sometimes check the logs on each of those resources. Let’s admit it - security breaches happen. There can be many reasons for that, like misconfigurations or software vulnerabilities. Unauthorized access can end up with ransomware, cryptojacking, website defacement, etc.

I’ll operate on identifiers from https://spdx.org/licenses/ TL;DR I choose MPL-2.0 if project is not “silly”, otherwise I choose BSD-2 If this document is too complex for you, here is a very good primer that I recommend: https://blog.svgames.pl/files/hacktoberfest2017-licences.pdf DISCLAIMER The “verdict” is personal opinion that I try to back up with references I find reliable. Also the decisions that lead to final choice don’t need to be the same for every project.

Soon I will take a final exam of Software Engineering postgraduate studies at Poznań University of Technology. One of the postgrads subjects is an IT project that we are finalizing. We figured that it would be nice to serve the beta release widely in internet and that it could be deployed to cloud. So I took the task and after some research (mostly involving free tier offers) I’ve chosen Cloudflare Workers which turned out to be a great stuff when it comes to developer experience and features available for free out of the box.