News for hackers. Stuff that matters.
Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @12:37PM (#17892622)
I'm interested in Chromebooks for a different reason, the same reason that brings me to Pixel phones.

I hate software that tracks me, but if I wipe out Android and I install a self compiled AOSP, it's a superb user experience for me.

Will these more upmarket Chromebooks (which have x86 CPUs and acceptable RAM & storage) be OK to run any regular Linux distro?

Right now, Xiaomi laptops are excellent cheap machines to run Linux on (thanks to having just Intel components). Same for Huawei if you are willing to spend a bit more, but on that price a Thinkpad is probably the way to go.

Re:$600 Chromebooks are a dangerous development for Microsoft by ac29 on Saturday September 01, 2018 @01:06PM (#17892778)
> Will these more upmarket Chromebooks (which have x86 CPUs and acceptable RAM & storage) be OK to run any regular Linux distro?

Yes, with the caveat that full BIOS/UEFI support sometimes lags hardware releases by 6-12 months - out of the box most Chromebooks can only boot ChromeOS. Pretty much all the Chromebook firmware work to support 3rd-party OS' is done by one guy, see his page here: https://mrchromebox.tech

I run Arch on a cheap Chromebook for some tasks at work, I've generally been satisfied, and will probably buy another one eventually. I think if I was spending $500+, I'd just buy a Windows laptop and reformat it though - way more choices, and they tend to be upgradable.

It's also worth keeping in mind most Chromebooks must be disassembled to remove a firmware write-protect screw in order to flash new firmware. The one I have requires removing the battery/keyboard/etc - more than just popping off a small panel on the bottom.

Re:$600 Chromebooks are a dangerous development for Microsoft by j0hnml on Saturday September 01, 2018 @02:34PM (#17893283)
Which chromebook do you have and what are its specs? I'm interested in doing the same, and I don't want to spend $800+ for a laptop I'm not going to be super happy with.
Re:$600 Chromebooks are a dangerous development for Microsoft by windexh8er on Saturday September 01, 2018 @05:45PM (#17894036)
Check out GalliumOS. One of the best, Chrome specific, distros around. The question on hardware comes down to what you want. Many of the newest releases of ChromeBooks do not have removable media (M.2 form factor). So, choose wisely up front: hardware that is supported by current releases and storage and RAM suitable to your needs. The latest CB I have is a Toshiba Chromebook 2 with an i3 processor and 4GB of RAM. That model has a removable M.2 and so mine has an upgraded 128GB of storage. It has received app support for ChromeOS and also runs Gallium with full support. You can dual boot these machines easily, which is how mine is setup.

Nick Janetakis had a nice write-up on setting it up from back when the machine was newer, but to give you an idea:

https://nickjanetakis.com/blog/transform-a-toshiba-chromeboo...

Re:$600 Chromebooks are a dangerous development for Microsoft by mcny on Saturday September 01, 2018 @06:05PM (#17894134)
I have a Lenovo Thinkpad Chromebook and I would not recommend it mostly because you have to fully disassemble it to unlock the bios. I managed to do something wrong when I opened it and closed it so after a while one of the hinges just broke.

Look for a Chromebook that you can unlock by just removing the battery. Anything else is just torture.

Re:$600 Chromebooks are a dangerous development for Microsoft by curioussavage on Saturday September 01, 2018 @06:12PM (#17894158)
I have the dell 7310. i3 with 8gb ram. Same as me chromebox last I heard(I think he had the i5 model but it’s not really much faster) it’s about the best experience. Flashing his full firmware is super easy
Re:$600 Chromebooks are a dangerous development for Microsoft by candiodari on Saturday September 01, 2018 @06:09PM (#17894146)
Additional caveat: chrome DRM will no longer be functional if you do this.
Re:$600 Chromebooks are a dangerous development for Microsoft by bubblethink on Saturday September 01, 2018 @08:36PM (#17894713)
I think the highest level of widevine will not work, which is probably used for 4k and such, but regular widevine that works on linux distros will still work since it doesn't need anything special.
Re:$600 Chromebooks are a dangerous development for Microsoft by krn on Saturday September 01, 2018 @03:28PM (#17893518)
> Will these more upmarket Chromebooks (which have x86 CPUs and acceptable RAM & storage) be OK to run any regular Linux distro?

GalliumOS[1] is a Ubuntu-based Linux distribution optimized for Chromebooks with a huge list of supported devices[2].

> Right now, Xiaomi laptops are excellent cheap machines to run Linux on (thanks to having just Intel components). Same for Huawei if you are willing to spend a bit more, but on that price a Thinkpad is probably the way to go.

I find Lenovo Thinkpad E4*0 series to be the best low-cost, high build-quality Linux development machines, since they start from $569.99, allow a wide range of hardware customizations[3], and meet Mil-SPEC durability standards[4].

[1] https://galliumos.org/

[2] https://wiki.galliumos.org/Hardware_Compatibility

[3] https://www.lenovo.com/us/en/laptops/thinkpad/thinkpad-e-ser...

[4] https://www.lenovo.com/hk/en/thisisthinkpad/innovation/think...

Re:$600 Chromebooks are a dangerous development for Microsoft by ChristianGeek on Saturday September 01, 2018 @04:24PM (#17893740)
I cannot express enough love for the TrackPoint keyboard! (I use an external one at home and at the office.)
Re:$600 Chromebooks are a dangerous development for Microsoft by binmanthrowaway on Saturday September 01, 2018 @05:45PM (#17894037)
Can't see 4k screen. Come on it is 2018 I don't want to see pixels.
Re:$600 Chromebooks are a dangerous development for Microsoft by krn on Saturday September 01, 2018 @06:01PM (#17894118)
This is a budget ThinkPad model, design for small businesses, where 4k display would be an overkill. I actually find FHD to be a better option for a development machine, because of the lower energy consumption and extended battery life.
Re:$600 Chromebooks are a dangerous development for Microsoft by binmanthrowaway on Sunday September 02, 2018 @08:30AM (#17896754)
It is like preferring dried beans over a calculator to do sums...
Re:$600 Chromebooks are a dangerous development for Microsoft by openfuture on Saturday September 01, 2018 @03:42PM (#17893584)
So I bought a cheap chromebook with an intel chip to run linux on and use as a dev machine.

The spacebar screen is a constant source of anxiety but it's even worse than that. The reason I am on chromeOS with sideloaded linux (crouton) is because when you flash custom bios (seabios) you need to authorize it, if your computer runs completely out of battery (like it did for me on a flight to Iran), then that authorization is revoked and you need to boot into chromeOS to fix it (something I couldn't do since I didn't have chromeOS) so the only thing you can do is press spacebar and wipe everything.

I think I'll never buy a chromebook again, I'll just get something from puri.sm or slimbook.es.

Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Saturday September 01, 2018 @12:49PM (#17892688)
> Xiaomi laptops are excellent machines to run Linux on (thanks to having just Intel components)

Which ones exactly? Do you have resources?

The ones I've seen sport Nvidia GPUs [1] [2]. Which means no Wayland, and only proprietary drivers. Not "excellent" or "just Intel components" in my book.

[1] https://www.banggood.com/XiaoMi-Gaming-Laptop-Intel-Core-I7-...

[2] https://www.banggood.com/Xiaomi-Pro-Notebook-15_6-Inch-Intel...

Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @01:06PM (#17892775)
Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Saturday September 01, 2018 @01:14PM (#17892820)
Good bang for the buck but I want at least 8 GB DDR4 in a new laptop (bought in 2018), and preferably also TB3 and an AMD GPU.

Regardless of the other unnecessary or lacking features Macbook laptops have (butterfly keyboard, touchbar, magsafe, USB-A ports come to mind) if you want a decent amount of RAM and an AMD GPU you pay the jackpot price on MBPs.

Re:$600 Chromebooks are a dangerous development for Microsoft by nl on Sunday September 02, 2018 @02:05AM (#17895835)
https://www.gearbest.com/laptops/pp_651697.html

12.5”, 8gb, full Intel. I haven’t tried it but it looks interesting and well priced.

Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Sunday September 02, 2018 @02:52AM (#17895950)
DDR3. Does have 2.4 GHz + 5 GHz WLAN which is another minimum requirement. Anyway, though I haven't used it this seems like a nice machine with good bang for the buck. Except when it comes to warranty.
Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @03:28PM (#17893517)
i5 has 8 GB of RAM and still an Intel HD card. Sadly, it's not fanless. Same as with MS Surface and virtually all fanless m3 setups, there's no 8 GB option.
Re:$600 Chromebooks are a dangerous development for Microsoft by michaelmrose on Saturday September 01, 2018 @03:05PM (#17893421)
Any practical benefit right now to switching to wayland?
Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Saturday September 01, 2018 @03:52PM (#17893626)
It depends. For me this is about being future proof.

Its more secure than X, but you can compartmentalise as well via VMs (Qubes does this) or Docker (Jessie Frazelle runs everything in Docker).

Enlightenment [1] supports Wayland since E20.

If you use i3 right now, you can use Sway [2] as drop-in replacement. That's my plan (since I use i3) if I might some time.

SailfishOS [3] also already uses Wayland. Tizen apparently does as well. SailfishOS doesn't use profiling or ads, and has an Android compatibility layer.

KDE and Gnome might as well (according to [4] they do); I don't use those.

[1] https://en.wikipedia.org/wiki/Enlightenment_(software)

[2] http://swaywm.org

[3] https://en.wikipedia.org/wiki/Sailfish_OS

[4] https://en.wikipedia.org/wiki/List_of_display_servers#Waylan...

Re:$600 Chromebooks are a dangerous development for Microsoft by earenndil on Saturday September 01, 2018 @09:04PM (#17894848)
What if my wm does not support wayland?

If it provides more security (I guess applications cannot draw over other applications, nor grab keyboard input unless they're in focus), then how can I have a wm? How can I have a screensaver?

Is there any reason to use it if most of my applications are running in xwayland?

Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Sunday September 02, 2018 @02:51AM (#17895948)
Less code runs as root than with X, since the server is far more lean.

There should be zero tearing or artifacts in Wayland, and the latency should be lower as well. Both due to passive compositing.

Screensavers are a pointless waste of energy. I'm not sure why you mention them.

In Wayland, WM/DE use IPC to communicate with each other; not X.

In theory you can run multiple XWayland servers to separate from each other. If security is a concern, Qubes might also be an option. And you're still more secure and better performance with Wayland plus some XWayland than with X.

Re:$600 Chromebooks are a dangerous development for Microsoft by earenndil on Monday September 03, 2018 @05:11PM (#17904896)
I still don't see how it is more secure. If the WM can use IPC and tell wayland 'hey, I want to send this keystroke' or 'what were the keyboard inputs?' then why can't some malicious application do the same?

Can I run multiple wayland servers separate from each other? If not, then I still don't see how wm can prevent a random application from pretending to be a wm but actually being a keylogger.

Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Tuesday September 04, 2018 @02:28AM (#17907019)
The Wayland compositor does that kind of task, not the DE/WM like with X. That's why porting to Wayland isn't trivial. The server has many less lines of code leading to a lower attack surface, and lower latency or less tearing, and better HiDPI functionality.
Re:$600 Chromebooks are a dangerous development for Microsoft by komali2 on Saturday September 01, 2018 @05:30PM (#17893966)
Ubuntu 18.04 gnome shipped with the option, but if you select there's a 50% of forming a black hole where your machine used to be.

I'm joking, but it really is super beta.

Re:$600 Chromebooks are a dangerous development for Microsoft by berti on Saturday September 01, 2018 @06:35PM (#17894253)
Wayland (with Gnome) is fine as a daily driver on Arch (I've been using it for months, since AMD drivers were mainlined). I guess Ubuntu's packages are just too old.
Re:$600 Chromebooks are a dangerous development for Microsoft by moetech on Saturday September 01, 2018 @08:36PM (#17894716)
Wayland worked really well on Ubuntu 18.04 for the period of time I tried it.
Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Sunday September 02, 2018 @02:45AM (#17895934)
Ubuntu uses Mir, developed in-house. Why, I don't know.
Re:$600 Chromebooks are a dangerous development for Microsoft by earenndil on Saturday September 01, 2018 @04:02PM (#17893658)
Nope!
Re:$600 Chromebooks are a dangerous development for Microsoft by rogerbinns on Saturday September 01, 2018 @02:49PM (#17893346)
> Will these more upmarket Chromebooks (which have x86 CPUs and acceptable RAM & storage) be OK to run any regular Linux distro?

They aren't ideal. But they do have a good alternative that is in its late beta stages. Typically you could run a Linux distro in a chroot on the chromebook, after putting it into developer mode. Unfortunately the chroot does have limits - fox example it doesn't get another IP address so you can't coexist much with ChromeOS - such as using avahi.

The new approach (named Crostini) instead uses a lightweight kvm based virtual machine mechanism to run a Linux guest isolated from the host. They also (by default) use the hardened ChromeOS kernel inside the guest. Note that not all chromebooks are currently supported but a new x86 chromebook should be fine.

https://www.reddit.com/r/Crostini/ https://chromium.googlesource.com/chromiumos/docs/+/master/c...

Re:$600 Chromebooks are a dangerous development for Microsoft by samstave on Saturday September 01, 2018 @03:29PM (#17893523)
Maybe you know the answer to this question I have always wanted:

I want to be able to run multiple OSs/Installations-of-the-same-OS on a single machine such that I can swap between "running" OSs - meaning, I want to have one OS sleep while I use the other.

So, if I have windows and ubuntu on the same machine - I dont want to reboot, I want to just put one to sleep and wake the other one up...

OR Ideally - I want to be able to run them side-by-side in some manner that is greater than a VM running on top of the other... My System76 laptop has dual SSD drives in it, I'd like to have both machines running, with half the resources dedicated to each, and have my KVM switch between them.

Anything come clsoe to this?

Re:$600 Chromebooks are a dangerous development for Microsoft by rogerbinns on Tuesday September 04, 2018 @10:45AM (#17909378)
The specific functionality you describe is available in mainframes, although they are designed to always run a hypervisor. You can't practically do it in the PC world because the operating systems either expect to use a virtualisation interface, or they expect direct control over the hardware. The latter will also give better performance.

Some virtualisation environments do have hardware passthrough. A good example would be having a high performance PCIE video card which is passed through to to a guest for gaming. You can also use real storage instead of files pretending to be storage, although this is less flexible (eg no snapshots).

My recommendation is to use Ubuntu as your host OS and run Windows as a VM guest.

Re:$600 Chromebooks are a dangerous development for Microsoft by severine on Saturday September 01, 2018 @04:35PM (#17893777)
I think you can do that with Proxmox.
Re:$600 Chromebooks are a dangerous development for Microsoft by sgroppino on Saturday September 01, 2018 @12:53PM (#17892711)
Which Xiaomi laptop is good with Linux Mint? Are they better than Lenovo?
Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @12:59PM (#17892753)
The Xiaomi Air 12 is really good quality for ~$550 if you go for the m3 CPU. It's fanless (but only 4 GB of RAM), which is something I love.

It's a different price point than Lenovo. Much cheaper. They are good ultrabooks.

Regardless of the CPU you choose (e.g. i5 has 8 GB, but it's not fanless), all 12 inch models have Intel components only, including the wireless card. It's one of the few laptops that truly runs well on Linux out of the box with zero glitches.

Only a few classic Thinkpads are better, with even good ACPI support for battery discharge events. But that's really rare, and does not make much difference if you run a HAL like UPower to abstract your ACPI-battery.

Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Saturday September 01, 2018 @01:19PM (#17892854)
There's a few ThinkPads where you can remove the BIOS and replace it with Coreboot, and remove Intel ME as well. For example the ThinkPad T60 and X200, available on second hand market. Replace the keyboard if you find it dirty to use those 2nd hand. The advantage these have is the hardware is serviceable by the user.
Re:$600 Chromebooks are a dangerous development for Microsoft by user5994461 on Sunday September 02, 2018 @04:36AM (#17896198)
These Think pads were released 10 years ago, it's a really bad idea to invest in used hardware that old. They can fail anytime.
Re:$600 Chromebooks are a dangerous development for Microsoft by sgroppino on Saturday September 01, 2018 @03:49PM (#17893616)
Thanks. I find $550 a bit expensive. Linux Mint runs flawlessly on a Lenovo S120 (11.6"/4GB RAM/32GB SSD) but I can't upgrade the SSD and that's a bummer. Can't complain, though, it was $170 new from Amazon...
Re:$600 Chromebooks are a dangerous development for Microsoft by panda88888 on Saturday September 01, 2018 @11:44PM (#17895415)
Asus Zenbook UX305 also support Linux 100% out of the box. It’s essentially a MacBook clone with 13” 1080p screen, m3, 8 gb ram, and 256 ssd. I currently use one with Mint Linux and is happy with it.
Re:$600 Chromebooks are a dangerous development for Microsoft by paulcarroty on Saturday September 01, 2018 @12:44PM (#17892665)
> if I wipe out Android and I install a self compiled AOSP, it's a superb user experience for me.

It's doesn't resolve the tracking issues.

Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @12:47PM (#17892679)
Why not? I'm running vanilla AOSP with F-Droid apps only. No Google Apps framework.

Threats are limited then to regular baseband radio issues. I know I could be doing better if we had open hardware, but that's the most practical solution I can implement today I think.

Re:$600 Chromebooks are a dangerous development for Microsoft by Fnoord on Saturday September 01, 2018 @01:17PM (#17892841)
That does solve the tracking issues, parent assumed you flashed OpenGapps w/it.

You can also run microG (LOS + microG I recommend; what I use on my smartphone) which contains UnifedNlp for location services.

Re:$600 Chromebooks are a dangerous development for Microsoft by paulcarroty on Saturday September 01, 2018 @02:32PM (#17893277)
Vanilla AOSP still use Google DNS by default and Google servers for an internet connection checker.
Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @03:29PM (#17893521)
I patch that, and a few other things. It's a poor man's CopperheadOS.
Re:$600 Chromebooks are a dangerous development for Microsoft by TheAceOfHearts on Saturday September 01, 2018 @06:14PM (#17894172)
Have you considered writing a guide on how you do this and what changes you make? I also own a Pixel, but kept running into problems when I tried to compile Android, eventually making me give up.
Re:$600 Chromebooks are a dangerous development for Microsoft by nextos on Saturday September 01, 2018 @08:08PM (#17894611)
There's great work around from many people. See e.g.: https://github.com/dan-v/rattlesnakeos-stack

That's a whole toolset to compile your AOSP in AWS and then build your own over-the-air updates.