NVIDIA, though? We are still a good few months, or years, away from attempting to seriously use NVIDIA and Linux in the same sentence without looking like a complete idiot.

Also it's officially certified to run Qubes OS.

- Disabled IME

- Coreboot EDK or Heads

- Removed Camera and Microphone

- Buskill kit

- Privacyscreen

- Tamper-evident Screws and Packaging

Using open boot and a neutered Intel ME is a good start but nothing too unique nowadays.

Also at this point hardware privacy is all well and good but if you are going to dump stock Windows 11 on it, well it is called Windows for a reason, lets all your data out of one.

>Framework. vPro Enterprise Framework devices actually meet HSI level 4, but they unfortunately do not handle firmware updates properly. They have not shipped a single firmware for their 13th generation over a year since its release date, and over 6 months since the disclosure of LogoFail. While they do ship some updates for other devices, how they have been handling so far is not acceptable if you need a secure device.

But if you don't need to run LLM's these will be fine.

I was content with 8GB of main RAM in my dev laptop until about a year ago.

I swear that hipster marketing has ruined HN's ability to evaluate products. Next you people are going to start bitching about the logo not lighting up.