Just a reminder that GNU Icecat on Gentoo Linux is the best browser choice

[rexruthless]

It even comes with LibreJS. Just make sure that you have a custom workstation consisting of a MilkV Jupiter wired to another MilkV Jupiter router board via cat6 cables to your default ISP router also. Run IP over DHCP for all connections, give the MilkV Jupiter router board a ath9k PCIe Atheros Wifi card, run a custom SOCKS5 proxy written in Python on both Jupiters, with X25519, Poly1305, ChaCha20 and Kyber for cryptographic post-quantum protection, with libsodium, PQClean and OpenSSL integration, a firewall (use firejail), pyshark, fail2ban, nftables with Suricata or Zeek (Bro) for LLM traffic scanning in pyshark. It should shut out any threats. After encrypting your traffic on your desktop MilkV Jupiter board w/ PCIe connection to a PCBway computer-class printed circuit board, w/ LiteX and Lattice ECP5 NAND + NOR controllers for memory instead of proprietary SD/eMMC/NVMe. Then wire a ECP5 HSM (Hardware Security Module) Module to hard brick the device in case it gets tampered with. Give it a Modos paper display, Keyboardio model 01 keyboard, 3D printed Ploopy mouse, use passive speakers (like Micca e.g., MB42X) w/ two more chips soldered to the PCBway printed circuit board for support (use a PCM1802 / PCM1808 (TI) ADC and a MAX98357A (Maxim) DAC). Then use a Microsoft Lifecam VX1000 / VX3000 or a Logitech Quickcam 4000 / Quickcam Express 1999 web cam. Optionally, wire three more MilkV Mars SBCs to the Jupiter workstation board via PCIe inference, if possible via bifurcating or modifying the SBC board. Give each "accelerator" board a smaller PCBway circuit board with the same modules for memory, ADC / DAC, and HSM. Likewise, use a MNT Reform laptop for programming boards via SiFive development boards. You can wipe amd program boards (like your MilkV Jupiter/Mars SBCs), to erase the proprietary DDR4 training controllers and replace with UberDDR3 via LiteDRAM. But that would require unsoldering and rewiring to a custom modified MilkV Jupiter/Mars board made from PCBway. Use ECP5 FPGAs for DDR3 controller. Now you have a fully libre board! Optionally, you can replace the proprietary GPU w/ a MIAOW GPU instead.

You can use the Mars SBCs for LLM LAN acceleration as a mini-cloud (like PyTorch or llama.cpp) using open wifi. Install Gentoo on the boards, harden the kernel, secure the bootchain, and when compiling it from source, refuse any proprietary packages and now run it over Sway. Gentoo runs smoothly on RISC-V (and so does Linux From Scratch, although that's a nightmare setting up, let alone maintaining). Will need kvm/qemu VM, custom SOCKS5 proxy written in Python, and Wifi password/firewall cracking tools in terminal for blackhat exercises.

Use GNU Icecat, ELinks for scouring neocities or wiby.me typecsites, or GNUNet/GNUNet CADET (or Jami)/GNUNet FS (File Sharing)/gnunet-vpn for browser services.

And as always, use openrc instead of systemd, use USBguard, use Ovrdrive USB flash drives for flashing Gentoo and decryption via KeePassXC.

 

[chudcentral]

Opsec schizo

 

[ли/чж]

Noted, my dear nig.

 

[Extern]

Have fun being fingerprinted by every site you visit.
Also >gentoo over mint

 

[Small Balls Messiah]

 

[FastBlast]

I actually used to use it a long time ago. Is it still maintained? I thought it died and stopped receiving updates

 

[Trident]

Opsec schizo

 

[rexruthless]

This is what your workstation should look like:

 

[rexruthless]

Other than that, give the speakers an amplifier (like a Fosi Audio ZA3 or V3, or similar TPA3255-based amps). Then, if you want to go for a 2G cellular network, make a cellular modem out of a ULX3S running a custom physical layer (PHY) (TDMA complexity, not OFDMA). Then, give the ULX3S a LimeSDR PCIe. Then wire the ULX3S to a LiPo battery, wire the other wire to a PCBway circuit board, w/ Motorola C123 screen + 2G antenna + TI Calypso chipset + buttons + microphone/speaker w/ LiteX and ECP5 NAND/NOR for memory on the board, FreeRTOS, OsmocomBB, a SIM card slot w/ programmable Sysmousim SIM card, and then wire three or four ethernet ports at the bottom to plug in your cat6 cables to your Jupiter workstation board, then use it to connect to a custom BBS written in Python that runs over gnunet, use GNU radio and AX.25 for fallbacks, use OpenBTS and Asterisk, and will also need a solar-powered BTS tower.

 

[Sunset]

Buy a thinkpad x200 and install heads. Write protect the flash chip. Put nail polish on the screws and take high resolution pictures to ensure signs of tampering. Do NOT use a HDD or SSD. They have DMA so a malicious firmware could do a lot of damage, use of USB is preferred since they do not have DMA. Completely remove the microphone, sound card, webcam and the WWAN card from the laptop. Remove the fan to prevent binary acoustic data transmission. Replace the default wifi card with a supported atheros card. Disable wifi when not in use, preferably by physically removing the card. Install OpenBSD and use xenodm to run the X display server. Running X via XenoDM is more secure than just using startx. Use musl instead of glibc, Libressl instead of openssl, sinit instead of systemd, oksh instead of bash, toybox instead of gnu coreutils to reduce attack surface. Enable as little kernel modules as possible. Use a hardened memory allocator. Apply strong SELinux and sandboxing policies. Restrict the root account heavily to make sure it never gets compromised. Disable JavaScript and CSS in your browser. Block all FAGMAN domains in your hosts file. Monitor all network requests. Do not use a phone. Never speak near anyone who owns a phone, they are always listening. Never use any non-librebooted technology made after 2006. Never leave your devices unattended. Tape triple layer aluminum foil all around your room as tempest shielding. Type really quietly as defense against audio keylogging. Use ecc ram to minimize rowhammer and rambleed. Encrypt everything multiple times with various different encryption implementations. Compile everything from source. Use hardened compilation flags. Always read through the source before installing something if possible. Only use the internet when absolutely necessary.