Amsawar gajeriya
Idan sirri shine fifiko mafi girma kuma kun shirya canza halaye:
- Tsarin barazana mai tsanani (ɗan jarida mai kare madogara, mai fafutikar siyasi a ƙasa mai hamayya, mai bincike na tsaro): Qubes OS don amfani na yau da kullum + Tails a kan USB daban don zaman mai haɗari na ɗan lokaci.
- Mai mai da hankali kan sirri amma na aikace-aikace (kuna son kwamfuta mai kama da na yau da kullum wanda ba ya aika rahoton bayanai): Linux Mint — tsarin aikace-aikacen da ya dace da Ubuntu, ƙarar Canonical an cire ta, halaye na asali masu adawar.
- Mafi kyawun OS na kasuwanci don sirri: macOS Sequoia tare da Advanced Data Protection da aka kunna. Ana amfani da gargaɗin lambar tushe da ba a buɗe ba, amma halaye na asali sun fi Windows kyau kuma tsaro na na'ura ya yi kyau.
- Dole ne ku yi amfani da Windows don aiki: Windows 11 Pro (ba Home ba) tare da Group Policy, BitLocker, Firefox, da cikakken tsarin ƙarfafawa. Yana yiwuwa a gudanar da Windows 11 mai sirri na ƙwarai — kawai kuna ciyar da karshen mako ɗaya kuna saita shi, kuma yana komawa baya tare da kowane babban sabuntawa.
Komai da ke ƙasa shine cikakkun bayanai a bayan wannan matsayin — abin da kowane OS ke yi ta asali, abin da za ku iya canzawa, da abin da ba za ku iya ba.
Windows 11 — ma'aunin anti-sirri
Windows 11 shine mafi muni daga cikin zaɓuɓɓukan kasuwanci, ba saboda yana da mugunta ba, amma saboda tsarin kasuwanci na Microsoft yana kula da OS a matsayin samfurin bayanai. Takamaiman bayanai:
Buƙatar asusu. Windows 11 Home yana buƙatar asusu na Microsoft yayin shigarwa. Hanyoyin kauce wa asusu na gida (umarni na OOBE\BYPASSNRO, dabara ta no@thankyou.com) suna ci gaba da gyarawa a cikin sabuntawa. Windows 11 Pro yana har yanzu yana barin asusun gida yayin shigarwa idan kun zaɓi hanyar "domain join".
Telemetry. Matakan biyu: "Required diagnostic data" (koyaushe ana kunna, ba za a iya kashe shi ta hanyar Saitunan UI ba — Group Policy yana barin ku iyakance shi, amma wasu sigina suna ci gaba da kwarara) da "Optional diagnostic data" (cikakken telemetry na matakin bincike wanda za ku iya kashe shi amma yana KUN ta asali). Microsoft yana buga ƙamus na bayanai, wanda ya fi yawancin masu siyar da OS yi, amma ma'aunin shine "Microsoft yana sanin abin da kuke yi".
Copilot + Recall. Recall (a kan kwamfutocin Copilot+ masu NPUs) yana ɗaukar hotuna na allon kwamfutarka kowane ɗan daƙiƙa, yana OCR-ing su, kuma yana gina lissafi na gida mai bincike. Bayan katsalandan na tsaro na Yuni 2024, Microsoft ya sa shi zaɓi ne, ya ɓoye ɓangaren bayanai, kuma ya buƙaci tabbatarwar Windows Hello don tambayar shi. Ikon da ke ƙasa yana ci gaba da zama a cikin OS. Kowane babban sabuntawa yana buɗe tambayar "Shin Recall yana har yanzu zaɓi ne?" Copilot kansa yana aika tambayoyi zuwa Azure OpenAI sai dai idan kun kashe fasalin da saninku.
Halaye na asali na OneDrive. Sababbin shigarwa a hankali suna canza Takardunku, Hotunanka, da Tebur zuwa %OneDrive%\ kuma suna fara haɗawa. Miliyoyin masu amfani suna da fayilolins su na sirri a cikin girgijen Microsoft ba tare da yanke shawara ta hankali don loda su ba.
Edge + Bing. Mai bincike na asali yana aika tambayoyi zuwa Bing. Edge yana da fasaloli masu amfani na sirri (toshe mai bin diddigin, InPrivate) amma halayensa na asali sun haɗa da aika URLs zuwa Defender SmartScreen na Microsoft.
Abin da za ku iya yi. Windows 11 shine OS mai iya ƙarfafawa saboda akwai abubuwa da yawa da za a kashe:
- Shigar da asusu na gida (Pro ko canje-canje na rajista a kan Home)
- Gudanar da O&O ShutUp10++ — jerin manyan toggar sirri 100+ tare da halaye na asali "da aka ba da shawarar". Yana aiwatar da Group Policy + canje-canje na rajista da suka tsira bayan sabuntawa.
- Kashe shigarwar OneDrive yayin shigarwa, cire shi gaba ɗaya idan ba a yi amfani da shi ba
- Maye gurbin Edge da Firefox ko Brave; canza bincike na asali zuwa DuckDuckGo, Kagi, ko Startpage
- Cire Cortana, Teams Consumer, da aikace-aikacen Xbox idan ba a yi amfani da su ba
- BitLocker (Pro kawai) ko VeraCrypt (Home) don FDE
- Group Policy: Computer Configuration → Administrative Templates → Windows Components → Data Collection
Bayan wannan tsari, za a iya sa Windows 11 ya zama mai kusan daidai da Ubuntu da ba a gyara shi ba. Haraji na ci gaba shine sake ziyartar saitunkuna bayan kowane Sabuntawa na Fasali (20H2, 22H2, 23H2, 24H2 kowanensu ya sake shigar da wasu halaye).
macOS Sequoia 15 — mafi kyawun OS na kasuwanci don sirri
macOS Sequoia ya fi Windows 11 ta hanyar da ta yi yawa ta asali, amma "ya fi Microsoft kyau" ba iri ɗaya da "mai sirri" ba ne.
Telemetry na Apple — Analytics, Device Analytics, da iCloud Analytics — ana kashe su ta asali a kan sababbin shigarwa a EU (GDPR), ana kunna su ta asali a Amurka (za ku iya kashe su a cikin Settings → Privacy & Security → Analytics & Improvements). Apple yana buga manufofin sirri su kuma yana yin takamaiman iƙirari game da sarrafa cikin na'ura, amma ba za ku iya tabbatar da waɗannan iƙirarin da kanku ba saboda OS ba a buɗe lambar tushe.
Halaye na asali na iCloud. Hotuna, Lambobin waya, Kalanda, da iCloud Drive suna haɗawa ta asali idan kun shiga da Apple ID. Saƙonni a iCloud suna kashe sai dai idan aka kunna su. Advanced Data Protection (iCloud da aka ɓoye ta ƙarshen-zuwa-ƙarshe don yawancin nau'ikan — Hotuna, Bayanan kula, Drive, ɓoyayyun kwafi) zaɓi ne kuma yana buƙatar iOS 16.2+ / macOS 13+ a kan dukkan na'urori naku. Apple yana rage yin magana game da shi yayin shigarwa saboda kunna shi yana nufin Apple ba za ta iya dawo da bayananka ba idan kun rasa damar shiga.
Siri + Spotlight. Ana aika tambayoyi zuwa Apple don warware su. Apple tana cewa an ɓoye su kuma ba a haɗa su da Apple ID naku. Za ku iya kashe "Search Suggestions from Apple" a Safari don dakatar da bugawa na URL bar daga kaiwa uwar garken Apple.
Apple Intelligence (an ƙara a 2024). Gabaɗaya a cikin na'ura don ƙananan samfurin, amma wasu tambayoyi ana aika su zuwa kayan aikin "Private Cloud Compute" na Apple. PCC yana amfani da kayan masarufi mai tabbatarwa da aka buga binaries — gine-ginen sirri na gaske. Zaɓi ne a EU, zaɓi ne ko'ina ma kamar yadda macOS 15 yake.
Gatekeeper + sa hannun lambar ƙa'ida. Kowane aikace-aikacen da kuke gudanar da shi yana samun dubawa ta sa hannun a kan sabis ɗin notary na Apple. Aikace-aikacen da aka gudanar da shi na farko suna wayar gida tare da tsayin Developer ID — Apple na iya (a ka'idar) yin rikodin abin da kowane Mac ke gudanar da shi da kuma lokacin. Wannan fasali ne na tsaro (yana kama aikace-aikacen da aka sani yana da mugunta) tare da farashi na sirri. sudo spctl --master-disable yana kashe aiwatar da sa hannun amma ba a ba da shawarsa ba.
Ƙarfi.
- Apple Silicon + Secure Enclave = tsaro mai ƙarfi na na'ura, buɗewa ta biometric da aka ɗaure ga kayan masarufi
- Aikace-aikacen App Store suna da alamomin sirri (ɗan ci gaban ya tabbatar da kansa, amma har yanzu yana nuna bayanai)
- Tsarin izini ya yi tsauri — aikace-aikace dole su yi tambaya kafin karanta lambobin waya, kalanda, kyamara, makirufo, wurin zamani
- FileVault (FDE) sauƙi ne a kunna shi kuma yana amfani da Secure Enclave
- Babu anti-virus tilas da ke wayar gida
Raunin.
- Ba a buɗe lambar tushe — iƙirarin sirrin kalmomin Apple ne
- Zaɓin janye iCloud an warwatsa su a cikin allon Saitunan
- Shigarwar Advanced Data Protection tana da wahalar aiwatarwa (Apple yana yin ta da wuya ta musamman)
- Kuncin kayan masarufi — idan kuna kula da sirri sosai don tabbatar da shi, wataƙila kuna so ku kasance a kan Linux da za ku iya bincike
Saita na aikace-aikace. Sababbin shigarwa → ƙi zaɓin analytics → kunna FileVault → kunna Advanced Data Protection idan dukkan na'uroriku suna tallafa shi → shigar da Firefox → kada ku shiga iCloud har sai kun yanke shawarar takamaiman nau'ikan da za ku haɗa.
Ubuntu 24.04 LTS — Linux na shahara
Ubuntu shine mafi yawan rarraba na Linux da aka yi amfani da shi a kwamfutoci kuma ma'aunin sirri mai kyau. Canonical yana da tarihi mai gauraye a kan wannan batu.
Ruwan Amazon na 2013. A wani ɗan lokaci, binciken Dashboard na Ubuntu Unity ya aika tambayoyi zuwa Amazon don sakamakon siyayya na "lenses". Wannan ya haifar da rikicin amincewa na shekaru da yawa a cikin al'umma. An cire fasalin a cikin 16.04 kuma Canonical bai sake yi ba. Yana da mahimmanci a sani saboda yana launi yadda masu amfani da Linux na dogon lokaci suke ji game da Ubuntu.
Telemetry na yanzu.
- Ubuntu Report — takaitaccen kayan masarufi/software na ɗan lokaci guda, mara suna da aka aika yayin shigarwa. Zaɓi ne; kuna ganin tambayar kafin ta gudana.
- Apport — rahoton karo. Kashe ta asali a kan fitowa; kuna zaɓa ta kowane karo.
- Livepatch — ɓoye-ɓoyen kernel mai zafi. Zaɓi ne; yana buƙatar rajistan Ubuntu Advantage.
- PopCon — gasar shahararren fakiti. Kashe ta asali.
- Telemetry na Snap — kantin snap na Canonical yana tattara adadin shigarwa/sabuntawa. Ba mafi lalacewa fiye da telemetry na mai bincike amma har yanzu kira ne zuwa Canonical don kowane shigar snap.
Allon sanarwa na ubuntu-advantage-tools. Sigar Ubuntu na kwanan nan sun ƙara buƙatun "motd" lokacin da kuka SSH ko buɗe tashar, suna talla Ubuntu Pro. Yana damun amma ba batun sirri ba ne (babu bayanai masu fita). An cire ko ɗauntar a cikin 24.04 ta hanyar saita ENABLED=0 a cikin /etc/default/ubuntu-advantage-tools.
Snap vs apt. Ubuntu 22.04+ yana jigilar Firefox a matsayin fakitin snap. Kantin snap yana magana da uwar garken Canonical; fakitin apt na gargajiya suna magana da duk abin da kuka saita a mirror. Idan "komai ta Canonical" jagoranci yana damunku, ko dai ku canza zuwa fakitin apt na Firefox na ppa:mozillateam/ppa, ko shigar da Firefox kai tsaye daga flatpak.
Ƙarfi. Buɗaɗɗen lambar tushe, za a iya bincike, zaɓin fakiti mai yawa, goyan bayan kayan masarufi mai kyau, Wayland ta asali a cikin 22.04+, GNOME 46 tare da halaye na asali na sirri mai kyau.
Raunin. Sha'awar kasuwancin Canonical wani lokaci yana nuna zuwa bayanai na masu amfani; telemetry na Snap ba za a iya gujewa ba idan kun yi amfani da snaps; buƙatun alamar "Ubuntu Advantage" suna ganuwa.
Saita na aikace-aikace. Sababbin shigarwa → ƙi Ubuntu Report → kashe Apport → kashe PopCon → maye gurbin Snap Firefox da apt Firefox ko Flatpak → kunna LUKS FDE yayin shigarwa → Firefox tare da uBlock Origin.
Fedora 41 — Linux na farko-farko
Fedora shine rarrabuwa ta al'umma ta Red Hat (IBM), ana amfani da shi a matsayin farkon hanya don RHEL. Ta fuskar sirri yana kama da Ubuntu tare da ɗan bambanci.
Babu daidaitaccen Canonical. Red Hat / IBM ba sa talla rajistace "Advantage" ga masu amfani da kwamfuta; lasisin kasuwanci yana zaune a kan RHEL, ba Fedora ba. Babu allon sanarwa, babu buƙatun sabuntawa da aka tilasta.
Telemetry ta asali. Ƙarami. Fedora Report (ƙidayar kayan masarufi) ana shigar da shi a cikin 42 — muhawara ta al'umma mai ci gaba, halin yanzu zaɓi ne. ABRT (rahoton karo) zaɓi ne; za ku ga sanarwa lokacin da karo ya faru kuma za ku yanke shawara ko za ku tura shi.
SELinux yana tilasta ta asali. Wannan fasali ne na tsaro, ba sirri ba ne musamman — yana ɗauke da cin zarafi na matakin tsari don haka aikace-aikacen da aka yi wa magudi ba zai iya karanta komai a tsarin naku ba. Ubuntu yana amfani da AppArmor don wannan manufa iri ɗaya amma a yanayin asali mai karɓa fiye. SELinux yana da tsauri fiye da.
Flatpak + dnf. Manajan fakitin Fedora. Flatpak na Flathub suna magana da Flathub CDN (ba siginar telemetry ba, kawai sauke); dnf yana magana da madubai na Fedora.
Wayland farko. Kowane spin na kwamfuta (GNOME, KDE, XFCE, da sauransu) yana jigilar Wayland a matsayin zaman ta asali, wanda yana da rarrabuwa mafi kyau tsakanin aikace-aikacen GUI fiye da X11 (aikace-aikace ba sa iya ɗaukar hoto / yin leƙen ayyukan maɓallin juna).
Ƙarfi. Babu tsarin kasuwancin Canonical, SELinux yana tilasta, bin diddigin sama mai sauri (kernel/Mesa/GNOME duk sun fi Ubuntu sabo).
Raunin. Ƙa'idar iya yana nufin "wani abu ya karye saboda matsalar direba"; zagayen tallafawa na watanni 13 kowane fitowa vs. shekaru 5 na Ubuntu LTS.
Saita na aikace-aikace. Sababbin shigarwa → ƙi rahoton karo (kuna samun tambayar karo na farko) → kunna LUKS yayin shigarwa → Firefox an shigar da shi a gaba kuma ba flatpak ba ne a kan Fedora Workstation.
Linux Mint 22 — mafi kyawun Linux mai tsarinta ta asali
Linux Mint shine tsabtar Ubuntu mai gudana tsawon lokaci. Suna ɗaukar Ubuntu LTS na sama, cire ƙarar Canonical, maye gurbin kwamfuta da Cinnamon (ko Xfce / MATE), kuma suna jigilar shi. Abin da kuke samu:
Babu Snap ta asali. Mint a fili yana cire snap kuma yana toshe apt daga shigar da daemon na snap. Firefox an shigar da shi a matsayin fakitin apt na yau da kullum daga PPA na Mozilla. Babu allon sanarwa.
Babu Ubuntu Report, babu ubuntu-advantage-tools. Mint yana kashe ko cire sassan kasuwanci na Canonical.
Babu telemetry. Mint kanta ba ta wayar gida ba. Rahoton karo yana kashe. Manajan sabuntawa yana magana da mirror na Mint don sabuntawa — zirga-zirgar manajan fakiti ta yau da kullum — amma ba ya rahoton amfani.
Madadin LMDE. Idan kuna son sigar Mint marar Canonical, LMDE (Linux Mint Debian Edition) yana amfani da Debian Stable a matsayin tushe. Irin wannan ƙwarewar kwamfuta, daban-daban a sama.
Cinnamon. Fork na GNOME wanda ke fifita kwamfuta ta al'ada mai kama da Windows. Ba "na zamani" kamar GNOME ba, ba mai jagorar maɓallin kamar KDE ba, amma mai sauƙi ga masu amfani masu canzawa daga Windows.
Ƙarfi. Mafi adawar halaye na asali na sirri na kowane distro na kasuwanci. Al'umma mai girma. Mai tsayi. Goyan bayan kayan masarufi mai kyau ta hanyar tushen Ubuntu.
Raunin. Yana da jinkiri wajen ɗaukar sabon fasaha (Wayland har yanzu zaɓi ne kamar yadda Mint 22 yake, yana asali a X11). Cinnamon yana da ƙarancin masu ba da gudummawa fiye da GNOME ko KDE. Tushen Ubuntu yana nufin kuna samun kwarin Ubuntu, kawai ba telemetry ba.
Saita na aikace-aikace. Sababbin shigarwa → kunna LUKS yayin shigarwa → sabuntawa → shigar da Firefox (yana can tuni) + uBlock Origin → kawai haka ne. Mint shine distro inda "shigar da shi kuma yi amfani da shi" yana ba ku matsayi na sirri mai kyau ba tare da ƙarin aiki ba.
Qubes OS 4.2 — rarrabuwa a matsayin tsarin barazana
Qubes yana cikin nau'insa na musamman. Maimakon ƙoƙarin yin OS ɗaya mai sirri fiye, Qubes yana tunanin za a yi wa kowane tsari ɗaya magudi kuma yana keɓance faɗin fashewa ta amfani da virtualization.
Yadda yake aiki. Qubes yana gudana a kan ƙarfen ƙasa ta hanyar Xen hypervisor. Kowane "VM" (ana kiran su qube a cikin kalmominsu) yana gudanar da Linux userspace mai zubar — yawanci Fedora ko samfurin Debian. Lokacin da kuka danna ɓoye imel, yana buɗewa a cikin DisposableVM da ake lalata bayan kun rufe shi. Bankinku yana faruwa a cikin AppVM nasa tare da damar sadarwa kawai ga bankinka. Bincika hanyoyin haɗi mara daidaituwa yana faruwa a cikin qube na Whonix-Workstation wanda ke jagorantar ta Tor.
Farashin UX. Kwafi-manna tsakanin qubes yana buƙatar takamaiman gajeriyar madannai (Ctrl+Shift+V) wanda ke tabbatar da canja wurin. Fayiloli da aka matsa tsakanin qubes suna wucewa ta hanyar tattaunawar FileCopy mai keɓewa. Kuna rasa tsammanin "komai kawai yana aiki a kan iri ɗaya kwamfuta" na OS na yau da kullum — amma kuna samun iyakokin tsaro na gaskiya.
Kaddarorin tsaro.
- Cin zarafi na mai bincike a cikin qube na aiki ba zai iya kai ga fayiloli a cikin qube na sirri ba.
- Mai karanta PDF da aka yi wa magudi ba zai iya fitar da jazbanka ba.
- Ɗigon USB da aka haɗa ana haɗa shi a cikin qube na sys-usb mai keɓewa — idan yana ɗauke da ƙwayar cuta, yana kai ga VM mai zubar, ba dom0 ba (yankin sarrafawa mai aminci).
- dom0 ba shi da damar shiga intanet kwata-kwata; a zahiri ba za ku iya gudanar da mai bincike a dom0 ba.
Buƙatun kayan masarufi. ƙarancin RAM na 16 GB (Qubes yana ba da shawarar 16 GB), 32 GB a aikace. SSD mai sauri (NVMe ya fi so). CPUs na Intel masu VT-x + VT-d; kwamfutoci ta musamman suna kan jerin daidaiton kayan masarufi (Thinkpads sabo, Framework, System76 Oryx Pro).
Haɗin Tor ta Whonix. Daga farko, Qubes yana jigilar samfurin Whonix — saita VM biyu inda VM ɗaya yana yin jagorancin Tor kuma ɗayan yana gudanar da bincikanka, ba tare da hanyar mai bincike ya koyi ainihin IP ko da ya yi magudi gaba ɗaya ba. Mafi kyawun gine-ginen Tor ƙarami fiye da Tails.
Ƙarfi. Tsarin tsaro na matakin zinari don masu barazana ta babba. Buɗaɗɗen lambar tushe. Snowden da masu jarida masu ƙima suna amfani da shi a fili.
Raunin. Kurmi mai tsauri na koyo (makonni 2-4 don samun sauƙi). Buƙatun kayan masarufi masu nauyi. Tallafin kayan masarufi mai iyaka — jerin kwamfutoci ta musamman maimakon "mafi yawan kayan masarufi na zamani". Babu software na kasuwanci; kuna kan aikace-aikacen Linux kawai.
Saita na aikace-aikace. Jagorar shigarwa ta Qubes ta kasance mai kyau sosai. Kashe karshen mako ɗaya don shigarwa ta farko da koya tsarin qube. Haɗa da kwamfutar tafi-da-gidanka mai daidaituwa (duba jerin HCL na su — kada ku sayi kayan masarufi masu bazuwar).
Tails 6.x — zaman mara ƙwaƙwalwa a USB
Tails (The Amnesic Incognito Live System) wani OS na Debian ne mai rai da ke kunnawa daga USB kuma yana manta da komai lokacin da kuka kashe kwamfuta. Ana tilasta kowane haɗi mai fita ta Tor — idan kwaro a cikin aikace-aikacen ya yi ƙoƙarin yin haɗi kai tsaye, yana gazawa maimakon malalar bayanai.
Yadda kuke amfani da shi. Kunna na'urar da ake nufi daga USB na Tails. Yi amfani da shi. Sake kunna. Ba a taɓa taɓa faifan na'urar ba (sai dai idan kun zaɓi a fili). Babu alama ta zaman da ta rage ko'ina sai a ƙwaƙwalwar ɗan adam.
Adanawa mai dorewa. Zaɓi ne, a kan iri ɗaya USB, an ɓoye tare da LUKS. Yana barin ku ajiye takamaiman babban fayili, saitunan gadar Tor, da ɗan gajeren jerin aikace-aikacen a duk sake kunnawa. Komai dabam ya kasance mara ƙwaƙwalwa.
Jagorancin Tor. Dukkan zirga-zirga. Babu "raba tafkin", babu "keɓewar tushen yanki". Aikace-aikacen da ba za su iya amfani da Tor ba kawai ba za su iya haɗawa ba. Wannan mai tsauri ne kuma wani lokaci yana damun (wasu tarurrukan bidiyo sun karye, yawancin shafukan banki sun toshe ƙofofin fita na Tor) amma ita ce kaddarar tsaro.
Ƙarfi. Mara ƙwaƙwalwa ta ƙira — USB da aka sata ba ta malala zaman naku. Tor ta asali — babu hanyar malalar IP na gaskiya ta haɗari. Ƙaramin farfajiyar kai hari — ɗan gajeren tari na software. Ana kula da kyau ta ƙungiyar mara riba.
Raunin. Ba ɗan direba na yau da kullum ba. Kunnawa daga USB yana da jinkiri. Zaɓin software an takaita shi da gangan. Jinkirin Tor yana karya yawancin sabis na kasuwanci. Babu yanayin tsarin mai dorewa a duk sake kunnawa sai dai idan kun zaɓa.
Mafi kyawu don.
- Ketare iyakoki (sake kunna zuwa OS na yau da kullum kafin kwastam)
- Haɗuwa da madogara na jarida
- Binciken batun mai mahimmanci da bai kamata ya haɗa da ainihin ku na yau da kullum ba
- Kowane zama inda "abin da kuke yi yanzu dole ya kasance ba za a iya haɗa shi da ko wanene ku sauran lokacin ba"
Saita na aikace-aikace. Sauke Tails daga tails.net, tabbatar da sa hannun (da muhimmanci), ɗora zuwa USB ≥ 8 GB, kunna na'ura daga gare ta (na iya buƙatar gyaran BIOS/UEFI). Saita kalmar sirrin mai gudanar da shi idan kuna buƙatar gudanar da umarni na sudo yayin zaman.
Tebur na kwatanci
| OS | Telemetry (ta asali) | Ana buƙatar asusu | Buɗaɗɗen lambar tushe | FDE ta asali | Halaye na girgije | Maki na sirri |
|---|---|---|---|---|---|---|
| Windows 11 Home | Koyaushe-ana-kunna + zaɓin janye kawai | Eh (Microsoft) | A'a | Wani lokaci (Device Encryption ta atomatik) | OneDrive yana kan | ★☆☆☆☆ |
| Windows 11 Pro | Za a iya rage shi ta Group Policy | A'a (zaɓin domain join) | A'a | Eh (BitLocker) | OneDrive yana kan | ★★☆☆☆ |
| macOS Sequoia | Zaɓin janye a EU, yana kan ta asali a Amurka | Ba da shawarar (Apple ID) | A'a | A'a (mai amfani dole ya kunna FileVault) | iCloud yana kan don Hotuna | ★★★☆☆ |
| Ubuntu 24.04 | Zaɓin shigarwa kawai | A'a | Eh | Zaɓi a shigarwa | Babu (telemetry na snap) | ★★★★☆ |
| Fedora 41 | Zaɓin rahoton karo | A'a | Eh | Zaɓi a shigarwa | Babu | ★★★★☆ |
| Linux Mint 22 | Babu | A'a | Eh | Zaɓi a shigarwa | Babu | ★★★★★ |
| Qubes OS 4.2 | Babu | A'a | Eh | Eh (LUKS tilas) | Babu | ★★★★★ |
| Tails 6.x | Babu | A'a | Eh | Ɓangare mai dorewa zaɓi | Babu (ta Tor jagoranci) | ★★★★★ |
(Taurari taƙaitaccen haɗaɗɗe ne na "nauyin telemetry + hukuncin lambar tushe da ba a buɗe ba + FDE ta asali + kuncin girgije". Ba shine kawai abin da ke da mahimmanci ba — Windows 11 Pro mai ƙarfafawa zai iya zama mai sirri fiye da shigarwa mai sauƙi ta Ubuntu.)
Shawarar mu ta amfani da hali
1. Mai mai da hankali kan sirri wanda ke buƙatar software na kasuwanci (Adobe, wasan kwaikwayo, Office, Zoom, da sauransu). Windows 11 Pro tare da BitLocker + O&O ShutUp10++ + Firefox + asusu na gida. Ko kunnawa biyu na Windows don aikace-aikacen da ke buƙatarsa da Linux Mint don komai dabam.
2. Ma'aikaci na ilimi, mai haɓakawa, ɗalibi, marubuchi. Linux Mint tare da LUKS + Firefox + uBlock Origin. Kashi tamanin da goma na ayyukan Windows/macOS suna haɗawa da kyau ga Mint. LibreOffice don yawancin takardun, OnlyOffice idan kuna buƙatar daidaiton Microsoft Office mai kyau fiye.
3. Mai ƙirƙirar abun ciki / mai zane wanda ke amfani da Adobe Creative Cloud. macOS Sequoia tare da FileVault + Advanced Data Protection + Firefox. Tallafin Adobe na gaskiya ne a macOS; yana da wuya a Linux (Wine/Bottles suna aiki don wasu aikace-aikacen, ba duka ba). Ayyukan Apple Silicon a aikin bidiyo shine mafi kyau na uku a ɓangaren kasuwanci.
4. Dan jarida / mai fafutika / mai bincike mai ɗaukar kayan aiki masu mahimmanci. Qubes OS a kan kayan masarufi mai daidaituwa don aiki na yau da kullum + Tails a kan USB don zaman mai haɗari na ɗan lokaci. Yi amfani da na'urori daban-daban na zahiri don "ainihin jama'a" vs "ainin aiki mai mahimmanci" idan haka ya yiwu.
5. Zaman mai haɗari na ɗan lokaci (ketare iyaka, haɗuwa da madogara, bincike batu). Tails a kan USB, an kunna shi a kan tsabtatacciyar na'ura, an kashe bayan haka. Kada ku sake amfani da USB a daban-daban yanayin haɗari ba tare da gogewa ɓangaren mai dorewa ba.
6. Kaka yana koyon amfani da kwamfuta. ChromeOS a kan Chromebook don sauƙi, KO Linux Mint Cinnamon idan akwai memba na iyali wanda zai iya yin saita na farko. Guji Windows 11 Home — saita asusu na Microsoft kawai na da rudani kuma aikin tsaftace ba ya zama dole ga mai amfani mai sauƙi.
Abin da muke aiki a kansa da gaske
Bayyanar da cikakken bayanai: ƙungiyar ipdrop.io tana gudanar da haɗaɗɗiyar — macOS don abun ciki/ƙira/aiki na yau da kullum, Linux Mint a kan na'ura daban don haɓakawa/aiki mai mahimmanci, da USB na Tails a cikin akwati da ake amfani da shi mai yiwuwa sau 3-4 a shekara. Qubes muna girmamawa amma ba mu yi amfani da shi yau da kullum ba — rashin sauƙi na gaskiya ne kuma tsarin barazanarmu bai buƙaci shi ba.
Duk abin da kuka zaɓa, mafi muhimmancin mataki na sirri ba OS ba ne — shine kunna ɓoyayyen cikakken faifan, amfani da manajan kalmar sirri, da rashin haɗa ainihin masu mahimmanci a cikin bayanan mai bincike na ku na yau da kullum. Zaɓin OS shine firam; halaye shine hoton.
Da alaka
- Lissafin Duba Sirri — matakai 20 don bincika asusunkun
- Menene VPN? — ɓangare a sama da OS don sirri na hanyar sadarwa
- Imel da aka Ɓoye — Proton Mail, Tutanota, Mailbox.org an kwatanta su
- Adanawa na Fayili da aka Ɓoye — Proton Drive, Tresorit, Sync.com an kwatanta su
- Proton Pass vs Bitwarden — cikakken bincike na manajan kalmar sirri