NV41 Series + Dasharo + Qubes OS
In crypto trading, security is one of the most important aspects. So you want to minimise the risk of hacks as much as possible. To mitigate this risk, it is a good idea to consider what hardware and operating system you need.
The NovaCustom NV41 Series combined with Dasharo coreboot and the operating system Qubes OS is the ideal combination for a highly secure laptop experience, especially for cryptotraders. In this blog post, we will delve deeper into each aspect, as well as additional points for maximum security.
Qubes OS: security through isolation
Qubes OS is built around the concept of compartmentalisation (or isolation): instead of running everything in one environment, Qubes OS divides the system into separate virtual machines (qubes). Each qube is an isolated environment in which different tasks can be performed. For instance, you can create a separate qube for work-related matters, e-mail, personal use, and yes: also a separate qube for managing your cryptocurrency.
- Advantages:
- Isolation: If one qube were to be hacked or otherwise compromised, other qubes would not be affected. This minimises the impact of potential attacks.
- Data security: Sensitive information is separated, meaning transaction data and personal documents cannot come into contact with each other. Moreover, Qubes OS has security as its top priority.
- Disadvantages:
- Steep learning curve: You will have to invest a lot of time to learn how to use Qubes OS properly. Should this not be an option for you, you can always use another GNU/Linux operating system that is more user-friendly. For that, see also the page which Linux distro should I choose?
- Heavy OS: Qubes OS requires a fast processor and a lot of memory because of the many VMs it will run. As a result, the battery life will be shorter than other operating systems like Ubuntu or Windows.
- Implementation:
- Workspaces: Create specific qubes for different tasks. For instance, you can create a separate qube for each cryptocurrency to ensure maximum data separation. See also Carol’s practical example.
- Disposable VMs: Use disposable VMs for temporary tasks, such as opening unknown links, to ensure security before moving to permanent use of a particular application.
- Cold storage of BTC and XMR: Learn how to setup a BTC or XMR wallet locally and offline.
Dasharo coreboot: control and transparency of firmware
Firmware is the control software of the laptop itself. Most laptops come with proprietary firmware, whose source code is a trade secret. NovaCustom offers laptops with Dasharo coreboot firmware. Dasharo is an open-source firmware distribution that relies on coreboot. It replaces the traditional BIOS or UEFI firmware and provides an alternative approach to firmware, where the source code is available for inspection and modification.
- Advantages:
- Transparency: Since the source code is public, users and cyber security analysts can inspect the firmware and understand what happens at the firmware level. Any issues with the firmware are also resolved publicly.
- Higher level of security: Dasharo is designed with security as the top priority.
- Intel Management Engine (ME) disabled: laptops with Dasharo coreboot firmware offer the option to disable the Intel Management Engine (ME).
- Updateable: Dasharo coreboot provides accessible firmware updates for a period of at least 5 years after purchase, allowing future potential vulnerabilities in the firmware to be fixed.
Additional options for even more security.
Privacy screen
To complement its privacy-oriented features, the NV41 Series offers the option of a privacy screen. This advanced screen limits the viewing angle, allowing only the user directly in front of the screen to see the content. This option is invaluable for crypto traders who value privacy and especially useful when working in public areas.
WiFi module
With the ability to physically remove (or have removed) the WiFi module, the NV41 Series gives users maximum control over wireless connectivity. This is a thoughtful choice to minimise potential WiFi related security risks. Of course, you could then still use an external WiFi adapter, should the need arise.
Camera module
The NV41 Series goes one step further in privacy protection. For instance, we offer an option to have the camera module removed. Still, you can always use an external webcam if required. Should you need the camera or microphone sporadically, you can also opt for a camera slider.
Physical security: our anti-tamper package
The NV41 Series can be equipped with the tamper-evident package, which means you can detect physical tampering. This includes shipping the laptop with anti-tamper tape and sealing the laptop’s screws. You can read more about this on our separate blog post of this package.
Paying with a cryptocurrency
As an advocate and dedicated provider of privacy-focused solutions, NovaCustom is obviously also open to cryptocurrency payments. We accept Bitcoin (BTC) and Monero (XMR), two of the most prominent cryptocurrencies on the market. You can read more about them on this page.
Ready?
Tijn Veldhuis
About the author: Tijn Veldhuis is someone who has been working since he was young. He has had many side jobs. Now that he has completed the Creative Technologist course, he has started working full-time at NovaCustom. Here, he works on orders and does marketing.
