Yeqa uye kokuqukethwe okuyinhloko

I-OS Yedesktop Eyimfihlo Kakhulu 2026 — Windows, macOS, Linux

Ukuqhathaniswa kwemfihlo phakathi kwe-Windows 11, macOS, Ubuntu, Fedora, Mint, Qubes, Tails — i-telemetry, ukubethela, ukuthi khetha ukuphi.

Kugcine kubuyekezwa: Ephreli 22, 2026

Isifinyezo

  • Kubasebenzisi abaningi, ukuhlelwa kwemfihlo kunjalo: **Tails > Qubes OS > Linux Mint / Fedora / Ubuntu > macOS > Windows 11**.
  • **I-Windows 11** inamasethingi amakhulu kakhulu ngokuzenzakalelayo: i-akhawunti ye-Microsoft eyamandalayo, i-telemetry engeke yenqatshwe, i-Copilot+Recall ithatha izithombe zesikrini sakho kuhardware ekwazi ukwenza lokho. Ingaqiniswa kodwa ulwa namasethingi azenzakalelayo.
  • **I-macOS Sequoia** iwu-OS wokuthenga omfihlo kakhulu: ukuphepha okuqinile kwidivayisi, i-iCloud ebethelwe inokukhethwa (i-Advanced Data Protection), kodwa umthombo wayo uvaliwe ngakho awukwazi ukuqinisekisa lokho okwenziwa kwangempela.
  • **I-Desktop Linux** (Ubuntu, Fedora, Mint) ingomthombo ovulekile, ayidluli i-akhawunti eyamandalayo, akukho i-telemetry okukhathazayo ngemuva kokuvala izinto ezimbalwa. I-Mint inamasethingi amfihlo kakhulu phakathi kwalawo mathathu.
  • **I-Qubes OS** inqoba kubasebenzisi abasengozini enkulu abafuna ukuphepha ngoklamo oluhlukene. **I-Tails** iyinto esheshayo yezinkambu zesikhashana, ezisebenzisa i-Tor, ezikhumbulayo — hhayi isebenziso lemihla ngemihla.

Impendulo emfushane

Uma imfihlo iyindikimba enkulu futhi uzimisele ukushintsha imikhuba:

  • Ithebheli yokushesha enkulu (isazi-phephandaba sivikelela imithombo, ummeleli wezinguquko ezifundeni elinosonga, umcwaningi wezokuphepha): I-Qubes OS ekusetshenziswa kwemihla ngemihla + I-Tails ku-USB ehlukene ngezikhathi eziphakeme zengozi.
  • Ugxile emfihlweni kodwa usebenzayo (ufuna ikhompyutha ejwayelekile ebukekayo engashayeli ekhaya): I-Linux Mint — i-ecosystem yesoftware ehambelana ne-Ubuntu, izinezelo ze-Canonical zisusiwe, amasethingi ahlakaniphile.
  • I-OS yokuthenga engcono kakhulu ngomfihlo: I-macOS Sequoia ne-Advanced Data Protection evuliwe. Isicindezelo somthombo ovaliwe siyasebenza, kodwa amasethingi amahle kune-Windows futhi ukuphepha kwidivayisi kuyakhazimula.
  • Kufanele usebenzise i-Windows ngomsebenzi: I-Windows 11 Pro (hhayi i-Home) ne-Group Policy, BitLocker, Firefox, nezinguquko ezinobudlova. Kunokwenzeka ukuqhuba i-Windows 11 enomfihlo ngokufanele — nje usetshenzisa ngephepha lasekupheleni kweviki ukuyilungisa, futhi ibuyela ngayo yonke i-apdeyt enkulu.

Konke okungezansi yimininingwane ngemuva kwale ranking — ukuthi i-OS ngayinye yenzani ngokuzenzakalelayo, ukuthi ungakushintsha ini, nokuthi awukwazi ukushintsha ini.

I-Windows 11 — isisekelo esingomfihlo

I-Windows 11 iyenye imbi kakhulu kuzo zonke izinketho ezivamile, hhayi ngoba inonya, kodwa ngoba imodeli yebhizinisi ye-Microsoft ibheka i-OS njengomkhiqizo wedatha. Imininingwane:

Isidingo se-akhawunti. I-Windows 11 Home idinga i-akhawunti ye-Microsoft ngesikhathi sokumisa. Izindlela zokuphasha ze-akhawunti yendawo (umyalo we-OOBE\BYPASSNRO, itrekhi ye-no@thankyou.com) ziqhubeka ukubethulwa ku-cumulative updates. I-Windows 11 Pro isivumela ama-accounts endawo ngesikhathi sokumisa uma ukukhetha indlela ye-"domain join".

I-Telemetry. Amazinga amabili: "Required diagnostic data" (njalo ivuliwe, ayikwazi ukuvaliwa nge-Settings UI — i-Group Policy ikuvumela ukuyinciphisa, kodwa ezinye izimpawu ziyaqhubeka ukugeleza) ne-"Optional diagnostic data" (i-telemetry yezinga lokusebenzisa iziphequluli engukwazi ukuyivala kodwa ivuliwe ngokuzenzakalelayo). I-Microsoft ishicilela isichazamazwi sedatha, okungaphezu kwazo izinhlelo ezinikeza amandla amningi ze-OS, kodwa umugqa wokuqala uthi "i-Microsoft iyazi lokho owenzayo".

I-Copilot + Recall. I-Recall (ku-Copilot+ PCs ene-NPUs) ithatha izithombe zesikrini sakho imizuzwana embalwa ngambalwa, izifunde ngokukhwabanisa, yakhe uhlu lokukhangeka lwasendaweni. Ngemuva kokungamuswa kwezokuphepha ngo-June 2024, i-Microsoft yenza ibe ivumekile, yabethela izinwe zedatha, futhi yadinga i-Windows Hello auth ukubuza. Ikhono eliyisisekelo liqhubeka ukubakhelwe ku-OS. Yonke i-apdeyt enkulu ivula umbuzo othi "i-Recall iyaqhubeka ivumekile ngempela na?" I-Copilot ngokwayo ithumela izicelo ku-Azure OpenAI ngaphandle uma uvala ngokuqondile leso sici.

Amasethingi e-OneDrive. Ukufaka okusha ngokuthulile kudluliselela Amadokhumenti akho, Izithombe, neDesktop ku-%OneDrive%\ bese iqala ukuvumelanisa. Izigidi zabasebenzisi zinazo izifayela zabo zomuntu siqu ku-cloud ye-Microsoft ngaphandle kokwenza isinqumo sokuzikhipha esiqondile.

I-Edge + Bing. Isiphequluli esizenzakalelayo sithumela izibuzo ku-Bing. I-Edge inezibonakaliso zomfihlo ezibalulekile (ukuvimbwa komlalisi, i-InPrivate) kodwa indlela yayo yokusebenza ngokuzenzakalelayo iqukethe ukuthumela ama-URL ku-Microsoft's Defender SmartScreen.

Okungakwenziwa. I-Windows 11 iwu-OS onakela kakhulu ngoba kunokuningi okudinga ukuvaliwa:

  • Faka nge-akhawunti yendawo (i-Pro noma itrekhi ye-registry ku-Home)
  • Qhuba i-O&O ShutUp10++ — uhlu lwamasethingi omfihlo angaphezu kuka-100 ane-"isincomo" okuzenzakalelayo. Isebenzisa i-Group Policy + izinguquko ze-registry eziphilelana nazo zonke i-apdeyt.
  • Vala ukumisa kwe-OneDrive ngesikhathi sokufaka, uyisuse ngokugcwele uma ungayisebenzisi
  • Shintshe i-Edge nge-Firefox noma i-Brave; shintsha ukusesha okuzenzakalelayo ku-DuckDuckGo, Kagi, noma Startpage
  • Susa i-Cortana, i-Teams Consumer, nezinhlelo ze-Xbox uma uzisebenzisa
  • I-BitLocker (i-Pro kuphela) noma i-VeraCrypt (i-Home) ye-FDE
  • I-Group Policy: Computer Configuration → Administrative Templates → Windows Components → Data Collection

Ngemuva kwalo msebenzi, i-Windows 11 ingayenziwa ifane nomfihlo ne-Ubuntu engashintshiwe. Intela eqhubekayo ukubuyela emasethingi akho ngemuva kwe-Feature Update ngayinye (20H2, 22H2, 23H2, 24H2 ngayinye yaphinda yazisa izindlela ezimbalwa).

I-macOS Sequoia 15 — i-OS yokuthenga engcono kakhulu ngomfihlo

I-macOS Sequoia ingcono kakhulu kune-Windows 11 ngokuzenzakalelayo, kodwa "ingcono kune-Microsoft" akuyi kahle kahle nothi "imfihlo".

I-telemetry ye-Apple — i-Analytics, i-Device Analytics, ne-iCloud Analytics — zivalwe ngokuzenzakalelayo ekufakeni okusha e-EU (GDPR), zivuliwe ngokuzenzakalelayo e-US (unguzivala ku-Settings → Privacy & Security → Analytics & Improvements). I-Apple ishicilela inqubo yayo yemfihlo futhi yenza izitatimende ezikhethekile ngokulungisa kwidivayisi, kodwa awukwazi ukuqinisekisa lezi zitatimende ngokuzimela ngoba i-OS ingomthombo ovaliwe.

Amasethingi e-iCloud. Izithombe, Izingxhumano, Ikhalenda, ne-iCloud Drive zivumelanisa ngokuzenzakalelayo uma ungena nge-Apple ID. I-Messages ku-iCloud ivalwe ngaphandle uma ivulwe. I-Advanced Data Protection (i-iCloud ebethelwe kwaphela phakathi kwazo zonke izigaba — Izithombe, Amanothi, i-Drive, i-backups) ivumekile futhi idinga i-iOS 16.2+ / macOS 13+ kuzo zonke idivayisi zakho. I-Apple iyayinciphisa ngesikhathi sokumisa ngoba ukuyivula kusho ukuthi i-Apple ayikwazi ukusindisa idatha yakho uma ulahlekelwa ukufinyelela.

I-Siri + Spotlight. Izibuzo zithumelwa ku-Apple ukuze zihlengwe. I-Apple ithi zenziwayo zangeke zahlotshaniswa ne-Apple ID yakho. Ungavala "Search Suggestions from Apple" ku-Safari ukuvimbela ukuthayipha kwenaba ye-URL ukufinyelela amaservu e-Apple.

I-Apple Intelligence (yengezwa ngo-2024). Iningi yayo iqhuba kwidivayisi kwezimodeli ezincane, kodwa ezinye izibuzo zithumelwa ku-Apple's "Private Cloud Compute" ingqalasizinda. I-PCC isebenzisa i-hardware eqinisekisiwe nezibinari ezishicilelwe — ukwakhiwa komfihlo okusha ngempela. Ivumekile e-EU, ivumekile ngazo zonke izindawo ngenye njengomacOS 15.

I-Gatekeeper + ukusayinwa kwekhodi. Yonke inhlelo uyiqhubayo ithola ukuhlola kwesiginesha ngesevisi ye-Apple yobukhosi. Izinhlelo zokuqala zishayela ikhaya nge-Developer ID hash — i-Apple ingangaziqopha yonke iMac eqhuba ini nanini. Lokhu kuyisici sokuphepha (ibamba izinhlelo ezaziwayo ezinezikhali) nezindleko zomfihlo. sudo spctl --master-disable iyavala ukusebenza kwesiginesha kodwa akukhuthazwa.

Amandla.

  • I-Apple Silicon + Secure Enclave = ukuphepha okuqinile kwidivayisi, ukuvula ngomboko okuhlanganisiwe nehardware
  • Izinhlelo ze-App Store zinama-labula omfihlo (izethulo zomqashwa ezizikhangisayo, kodwa zikhombisa ulwazi)
  • Imodeli yezimvume inobukhali — izinhlelo kufanele zicelele ngaphambi kokufunda izingxhumano, ikhalenda, ikhamera, i-mic, indawo
  • I-FileVault (FDE) ilula ukuyivula futhi isebenzisa i-Secure Enclave
  • Akukho i-anti-virus eyamandalayo eshayela ikhaya

Ubuthakathaka.

  • Umthombo ovaliwe — izitatimende zomfihlo zingamazwi e-Apple kuphela
  • Ukukhesha kwe-iCloud kunasahlukanisa kuwo wonke amaphaneli amaSethingi
  • Ukumisa kwe-Advanced Data Protection kunezingqinamba (i-Apple ngokuqondile ikwenza kunzima ukuyivula)
  • Ukuvalwa kwe-hardware — uma ukhathalela imfihlo ngokwanele ukuthi uyiqinisekise, mhlawumbe ufuna ukuba ku-Linux ongayihlola

Ukumisa okungokoqobo. Ukufaka okusha → khipha i-analytics evumekile → vula i-FileVault → vula i-Advanced Data Protection uma zonke idivayisi zakho ziyisekela → faka i-Firefox → ungangeni ku-iCloud uze unqume ngokuqondile ukuthi izigaba ziphi ezizovumelaniswa.

I-Ubuntu 24.04 LTS — i-Linux edumile

I-Ubuntu i-Linux distribution efakiwe kakhulu kuma-desktop futhi isisekelo somfihlo esifanele. I-Canonical inalo umlando ohlanganisiwe kulesi sihloko.

I-Amazon lens ngo-2013. Ngesikhathi esifushane, ukusesha kwe-Ubuntu Unity's Dash kwathumela izibuzo ku-Amazon ngama-"lenses" okuthengisa. Lokhu kwaqalisa isikhathi eside sezinkinga zokwethemba emphakathini. Isici lasisuswa ku-16.04 futhi i-Canonical ayiliphindanga. Kubalulekile ukwazi ngoba kubonisa indlela abasebenzisi be-Linux abadala abazizwa ngayo mayelana ne-Ubuntu.

I-Telemetry yamanje.

  • Ubuntu Report — isifinyezo se-hardware/software esingenamcebo, esithumelwa ngesikhathi sokufaka kanye. Ivumekile; ubona isikhundla ngaphambi kokuba isebenze.
  • Apport — ukubika ukwephuka. Ivalwe ngokuzenzakalelayo kwezikhuni; uyavuma ngokukrasha ngakunye.
  • Livepatch — ukuphatha okushisayo kwekhenel. Ivumekile; idinga ukubhalisa kwe-Ubuntu Advantage.
  • PopCon — imidlalo yokuduma kwephekhisi. Ivalwe ngokuzenzakalelayo.
  • Snap telemetry — isitolo se-snap se-Canonical siqoqa izibalo zokufaka/ukuhlaziya. Akuhlasi kwe-telemetry yesiphequluli kodwa kuseyisibizo ku-Canonical ngayo yonke i-snap efakiwe.

Amaskrini ankhona e-ubuntu-advantage-tools. Izinguqulo ze-Ubuntu zamuva zengeza izibizo ze-"motd" uma ufaka i-SSH noma uvula i-terminal, ukhangisa i-Ubuntu Pro. Kuyakhathaza kodwa akuyona inkinga yomfihlo (akukho idatha ephumayo). Zisuswa noma zithuliswa ku-24.04 ngokuseta ENABLED=0 ku-/etc/default/ubuntu-advantage-tools.

I-Snap vs apt. I-Ubuntu 22.04+ ihambisa i-Firefox njengephekhisi ye-snap. Isitolo se-snap sikhuluma namaservu e-Canonical; amaphekhisi e-apt avamile akhuluma noma iyiphi i-mirror oyilungisile. Uma ukuqondisa "konke nge-Canonical" kukukhathaza, zikhiphe ku-ppa:mozillateam/ppa Firefox apt package, noma ufake i-Firefox ngqo kusuka flatpak.

Amandla. Umthombo ovulekile, uhlolekayo, ukukhetha kwephekhisi okukhulu, ukusekelwa kwe-hardware okuhle, i-Wayland ngokuzenzakalelayo ku-22.04+, i-GNOME 46 ne-defaults ezifanele zomfihlo.

Ubuthakathaka. Izintando zezomthengi ze-Canonical ngezinye izikhathi ziqondisa kwi-data yabasebenzisi; i-Snap telemetry ayinqatshwi uma usebenzisa i-snaps; amaskrini ankhona e-"Ubuntu Advantage" ayabonakala.

Ukumisa okungokoqobo. Ukufaka okusha → khipha i-Ubuntu Report → vala i-Apport → vala i-PopCon → shintshe i-Snap Firefox nge-apt Firefox noma Flatpak → vula i-LUKS FDE ngesikhathi sokufaka → i-Firefox ne-uBlock Origin.

I-Fedora 41 — i-Linux yokuqala umthombo

I-Fedora i-distribution yomphakathi ye-Red Hat (IBM), esetshenziswa njengomsuka we-RHEL. Ngomfihlo inezinto ezifanayo ne-Ubuntu nezinguquko ezimbalwa.

Akukho okulingana ne-Canonical. I-Red Hat / IBM ayikhangisi ngokukhululeka kwe-"Advantage" kubasebenzisi bama-desktop; ukuphatha amandla kwezebhizinisi kuhlala ku-RHEL, hhayi ku-Fedora. Akukho amaskrini ankhona, akukho izibizo zokushesha zokunothile.

I-Telemetry ngokuzenzakalelayo. Yencane. I-Fedora Report (inhlolovo ye-hardware) iyengeniswa ku-42 — impikiswano yomphakathi eqhubekayo, isimo samanje sivumekile. I-ABRT (ukubika ukwephuka) ivumekile; uzobona isaziso lapho kwenzeka ukwephuka futhi unqume ukuthi uzothumela.

I-SELinux isetwa ngokuzenzakalelayo. Lokhu kusici sokuphepha, hhayi ukwazisa omfihlo ngokwakhiwa — iqukethe ukuxhashazwa kwinqanaba lohlelo ngakho inhlelo ekhohlakalisiwe ayikwazi ukufunda konke okusesistemini yakho. I-Ubuntu isebenzisa i-AppArmor ngenjongo efanayo kodwa enethinsi evumilayo ngokuzenzakalelayo. I-SELinux inobukhali obungaphezulu.

I-Flatpak + dnf. Iziphathi zamaphekhisi ze-Fedora. I-Flathub flatpaks ikhuluma ne-Flathub CDN (hhayi i-signal ye-telemetry, nje i-download); i-dnf ikhuluma nezibuko ze-Fedora.

I-Wayland kuqala. Yonke i-spin yedesktop (GNOME, KDE, XFCE, njl.) ihambisa i-Wayland njenge-session ezenzakalelayo, enokunganyelana okungcono phakathi kwezinhlelo ze-GUI kunale ye-X11 (izinhlelo azikwazi ukuthatha izithombe zesikrini / ukuqapha izikhiye ngokuphambili kwezinye).

Amandla. Akukho izikhombisi zokuthenga ezifanayo ne-Canonical, i-SELinux isetwa ngokuzenzakalelayo, ukulandelwa komthombo ngokukhulu (i-kernel/Mesa/GNOME zonke zamuva kune-Ubuntu).

Ubuthakathaka. Ukugijima esangqondweni kungenatha ukuthi "kunento eyephukile ngenxa yokuhlehla kwedrayivu"; isikhathi sokusekela saminyaka eyi-13 nge-release vs izinyaka ze-Ubuntu LTS ezinhlanu.

Ukumisa okungokoqobo. Ukufaka okusha → khipha imibiko yokwephuka (uthola isikhundla ngokuqala okwenzekayo) → vula i-LUKS ngesikhathi sokufaka → i-Firefox ifakiwe ngaphambi futhi hhayi i-flatpak ku-Fedora Workstation.

I-Linux Mint 22 — i-Linux emfihlo kakhulu ngokuzenzakalelayo

I-Linux Mint ukususa okudingekayo kwe-Ubuntu okuqhubekayo. Bathatha i-Ubuntu LTS yomthombo ophezulu, basuse izinezelo ze-Canonical, bashintsha idesktop nge-Cinnamon (noma Xfce / MATE), bayayihambisa. Lokho okutholayo:

Akukho i-Snap ngokuzenzakalelayo. I-Mint ngokuqondile isusa i-snap futhi ivimba i-apt ekufakeni i-snap daemon. I-Firefox ifakiwe njengephekhisi ye-apt evamile kusuka ku-Mozilla's PPA. Akukho amaskrini ankhona.

Akukho i-Ubuntu Report, akukho i-ubuntu-advantage-tools. I-Mint ivala noma isuse izigamu zokuthenga ze-Canonical.

Akukho i-telemetry. I-Mint ngokwayo ayishayeli ikhaya. Ukubika ukwephuka kuyavalwa. Iphathi yokuhlaziyi ikhuluma nezibuko ze-Mint nge-updates — ukuhamba kwephekhisi evamile — kodwa ayibiki ukusetshenziswa.

I-LMDE fallback. Uma ufuna inguqulo ye-Mint engelona elikhulu le-Canonical, i-LMDE (Linux Mint Debian Edition) isebenzisa i-Debian Stable njengomsuka. Isipiliyoni sedesktop esifanayo, umthombo ophezulu owehlukile.

I-Cinnamon. Uhlaka lwe-GNOME olunikeza ukuqama idesktop evamile efana ne-Windows. Incane "yesimanjemanje" kune-GNOME, incane yokhiye kunale ye-KDE, kodwa ifikeleka kubasebenzisi abashintsha kusuka ku-Windows.

Amandla. Amasethingi omfihlo amahlakaniphile kakhulu kunoma iyiphi i-distro evamile. Umphakathi omkhulu. Izikhuni. Ukusekelwa kwe-hardware okuhle ngesisekelo se-Ubuntu.

Ubuthakathaka. Ilambatha ekwamukeleni ubuchwepheshe obusha (i-Wayland isavumekile njengomacOS Mint 22, iqala nge-X11). I-Cinnamon inabakhiqizi abancane kune-GNOME noma i-KDE. Umthombo ophezulu we-Ubuntu usho ukuthi uthola izikhali ze-Ubuntu, nje hhayi i-telemetry yayo.

Ukumisa okungokoqobo. Ukufaka okusha → vula i-LUKS ngesikhathi sokufaka → hlaziya → faka i-Firefox (isekho) + uBlock Origin → yilokho nje. I-Mint i-distro lapho "ukufaka nokusebenzisa" kukupha ukuma komfihlo ofanele ngaphandle komsebenzi owengeziwe.

I-Qubes OS 4.2 — uklamo oluhlukene njengethebheli yokushesha

I-Qubes iku-category yayo. Esikhundleni sokuzama ukwenza i-OS eyodwa ibe yimfihlo kakhulu, i-Qubes icabanga ukuthi noma iyiphi inhlelo eyodwa izokhohlakaliswa futhi yahlukene ngokusabela kusetshenziswa i-virtualization.

Indlela yokusebenza. I-Qubes iqhuba ku-bare metal nge-Xen hypervisor. Yonke i-"VM" (ebizwa ngokuthi qube ngokwalezi zinhlelo) iqhuba i-Linux userspace esetshenzwa — ngokuvamile i-Fedora noma i-Debian templates. Lapho ucofela ilege lephephandaba, livuleka ku-DisposableVM ebhujiswa ngemuva kokuyivala. I-banking yakho yenzeka ku-AppVM yayo ene-access yenethiwekhi kuphela yebhange lakho. Ukuzula ama-links angejwayelekile kwenzeka ku-Whonix-Workstation qube edlulisa nge-Tor.

Inkokhelo ye-UX. Ukusonga nokuyeka phakathi kwama-qubes kudinga isikhundla seklabodi esiqondile (Ctrl+Shift+V) esekhonfa ukudluliswa. Amafayela ahanjiswa phakathi kwama-qubes adlula ku-FileCopy dialog ezinikeleyo. Ulahlekela ukucabanga "konke kusebenza nje edesktop efanayo" kwe-OS evamile — kodwa uthole imingcele yeqiniso yokuphepha.

Izici zokuphepha.

  • Ukuxhashazwa kwesiphequluli ku-work qube akukwazi ukufinyelela izifayela ku-personal qube.
  • I-PDF reader ekhohlakalisiwe ayikwazi ukukhipha isikhwama sakho semali.
  • I-USB thumb drive efakiwe ifakwa ku-dedicated sys-usb qube — uma igcwele i-malware, ifinyelela i-disposable VM, hhayi i-dom0 (izwe lokuphatha elithenjwayo).
  • I-dom0 ayin-access yenethiwekhi nhlobo; ngokwezinga, awukwazi ukuqhuba isiphequluli ku-dom0.

Izidingo ze-hardware. I-RAM engu-16 GB okungenani (i-Qubes incoma i-RAM engu-16 GB), engu-32 GB ngokusebenzayo. I-SSD ekhawula (i-NVMe kukhethwa). Ama-CPU e-Intel ane-VT-x + VT-d; ama-laptop athile asekuhlu lokuhambisana kwe-hardware (i-Thinkpads zamuva, i-Framework, i-System76 Oryx Pro).

Ukuhlanganiswa kwe-Tor nge-Whonix. Ngaphandle kwesandla, i-Qubes ihambisa ne-Whonix templates — ukumisa kwe-VM mbili lapho i-VM eyodwa yenza ukuqondisa kwe-Tor nenye iqhuba isiphequluli sakho, ngaphandle kwendlela yesiphequluli yokufunda i-IP yangempela ngisho yaxhashazwa ngokugcwele. I-architecture ye-Tor engcono ngaphandle kwe-Tails.

Amandla. Imodeli yokuphepha evangela abasebenzisi abakhulu abaphakeme. Umthombo ovulekile. U-Snowden nabazali bamaphephandaba abanenani eliphakeme bayisebenzisa esidlangalaleni.

Ubuthakathaka. Ukufunda nzima (amaviki ama-2-4 ukupheleliseka). Izidingo ze-hardware ezikhulu. Ukusekelwa kwe-hardware okulinganiselwe — amahlu ama-laptop athile kuneze "i-hardware yamuva eningi". Akukho software yokuthenga; useizinhlelo ze-Linux kuphela.

Ukumisa okungokoqobo. Isikhokelo sokufaka esisemthethweni se-Qubes sibalulekile. Cabanga ngephepha lasekupheleni kweviki lokufaka okuqala nokufunda imodeli ye-qube. Hlanganisa ne-laptop ehambisanayo (hlola uhlu lwabo lwe-HCL — ungathengeli i-hardware engejwayelekile).

I-Tails 6.x — izinkambu ezikhumbulayo ku-USB

I-Tails (The Amnesic Incognito Live System) i-OS ephilayo esekelwe ku-Debian eqala ku-USB futhi ikhohlwe konke lapho uyivala. Yonke ixhumano eliphumayo liphoqelelwe nge-Tor — uma kuba nephutha kwinhlelo ozama ukwenza uxhumano olungqondile, lihluleka esikhundleni sokungeqe.

Indlela yokuyisebenzisa. Qala umshini omisiwe usuka ku-Tails USB. Uyisebenzise. Qala kabusha. Idrayivu yenqina yomshini ayizange ithintwe (ngaphandle uma uvuma ngokuqondile). Akukho uphawu lwesession oluhlala noma kuphi ngaphandle kwenkumbulo yomuntu.

Ukugcina okugcinwayo. Ivumekile, ku-USB efanayo, ibethelwa nge-LUKS. Ikuvumela ukugcina ifolda enikelekiyo, amasethingi e-Tor bridge, nohlu omfishane wezinhlelo phakathi kokunqamula. Konke okukodwa kuqhubeka ukukhohlwa.

Ukuqondisa kwe-Tor. Yonke ingqokelela. Akukho "i-split tunnel", akukho "ukukhesha okusekelwe kumizila". Izinhlelo ezingakwazi ukusebenzisa i-Tor azikwazi nje ukuxhuma. Lokhu kunobukhali futhi ngezinye izikhathi kuyakhathaza (ezinye izinhlelo zekhonferensi zombangazwe ziyaphuka, iziza eziningi zamabhange zivimba izimbobo ze-Tor exit) kodwa kuwuphawu lokuphepha.

Amandla. Ikhohlwa ngoklamo — i-USB elahlekile ayikuvezi isession yakho. I-Tor ngokuzenzakalelayo — akukho ndlela yokuveza ngokungaqondile i-IP yakho yangempela. Izinga lokushesha elincinane — isidladla se-software esilinganiselwe. Ikhona ngomphakathi ongenafuzo.

Ubuthakathaka. Hhayi i-driver yemihla ngemihla. Ukuqala ku-USB kulambatha. Ukukhetha kwesoftware kulinganiselwe ngokuqondile. I-latency ye-Tor iphula izinsizakalo eziningi zokuthenga. Akukho isimo sesistemu eqhubekayo phakathi kokuqalisa kabusha ngaphandle uma uvuma.

Ingcono ngeze.

  • Ukuwela imingcele (qala kabusha ku-OS evamile ngaphambi kobhekesha lwamadolobha)
  • Ukuhlangana nemithombo yamaphephandaba
  • Ucwaningo ngesihloko esinobudlova okungekufanele kuhlanganiswe namazwi akho omuntu oyaye
  • Noma iyiphi isession lapho "lokho owenzayo manje akumelele kuhlotshaniswe nothina unguye isikhathi sonke"

Ukumisa okungokoqobo. Landa i-Tails kusuka tails.net, uqinisekise isiginesha (kubalulekile), ufake ku-USB ≥ 8 GB, uqalise umshini omisiwe kusuka kuyo (kungadinga ukuvula i-BIOS/UEFI). Seta iphasiwedi yomphathi uma udinga ukuqhuba imiyalo ye-sudo ngesikhathi sesession.

Ithebhuli yokuqhathanisa

I-OS I-Telemetry (ngokuzenzakalelayo) I-akhawunti edingekayo Umthombo ovulekile I-FDE ngokuzenzakalelayo Amasethingi e-cloud Amanqe omfihlo
Windows 11 Home Njalo ivuliwe + ukukhesha kuphela Yebo (Microsoft) Cha Ngezinye izikhathi (i-Device Encryption ye-auto) I-OneDrive ivuliwe ★☆☆☆☆
Windows 11 Pro Inganciphiswa nge-Group Policy Cha (inketho ye-domain join) Cha Yebo (BitLocker) I-OneDrive ivuliwe ★★☆☆☆
macOS Sequoia Ukukhesha e-EU, ivuliwe ngokuzenzakalelayo e-US Ikhuthazwa (Apple ID) Cha Cha (umsebenzisi kufanele avule i-FileVault) I-iCloud ivuliwe kweZithombe ★★★☆☆
Ubuntu 24.04 Ukuvuma ngesikhathi sokufaka kuphela Cha Yebo Evumekile ngesikhathi sokufaka Yicela (i-snap telemetry) ★★★★☆
Fedora 41 Imibiko yokwephuka evumekile Cha Yebo Evumekile ngesikhathi sokufaka Yicela ★★★★☆
Linux Mint 22 Ayikho Cha Yebo Evumekile ngesikhathi sokufaka Yicela ★★★★★
Qubes OS 4.2 Ayikho Cha Yebo Yebo (LUKS yamandalayo) Yicela ★★★★★
Tails 6.x Ayikho Cha Yebo I-vol eqhubekayo evumekile Yicela (i-Tor iqondisa) ★★★★★

(Izinkanyezi zihlanganisa ngokuzenzakalelayo "umthwalo we-telemetry + inhlawulo yomthombo ovaliwe + i-FDE ngokuzenzakalelayo + ukuboshwa kwamafu". Akukhona into eyodwa ebalulekile — i-Windows 11 Pro eqiniswayo inganenwa kakhulu ngomfihlo kune-Ubuntu efakiwe ngokungaqaphelisisi.)

Isincomo sethu ngokusetshenziswa

1. Umthengi ogxile emfihlweni odinga nayo software evamile (i-Adobe, eminidlalo, i-Office, i-Zoom, njl.). I-Windows 11 Pro ne-BitLocker + O&O ShutUp10++ + Firefox + i-akhawunti yendawo. Noma ukuqala okubili i-Windows yezinhlelo ezidingayo ne-Linux Mint ngazo zonke ezinye.

2. Umsebenzi wolwazi, umqulusi, umfundi, umbhali. I-Linux Mint ne-LUKS + Firefox + uBlock Origin. Amaphesenti angamashumi ayisishiyagalolunye emikhakha ye-Windows/macOS ihambisana ngokuqondile ne-Mint. I-LibreOffice yamamadokhumenti amaningi, i-OnlyOffice uma udinga ukuhambisana okungcono ne-Microsoft Office.

3. Umqophi wamakliphu / umdizayini osebenzisa i-Adobe Creative Cloud. I-macOS Sequoia ne-FileVault + Advanced Data Protection + Firefox. Ukusekela kwe-Adobe kwangempela ku-macOS; kuyinkinga ku-Linux (i-Wine/Bottles isebenza kwezinye izinhlelo, hhayi zonke). Ukusebenza kwe-Apple Silicon kumsebenzi womvide ngempela kwakahle kakhulu phakathi kwezinketho ezintathu zokuthenga.

4. Isaziphephandaba / ummeleli wezinguquko / umcwaningi ophatha izinto ezinobudlova. I-Qubes OS kuhardware ehambisanayo ngemisebenzi yemihla ngemihla + I-Tails ku-USB ngezikhathi eziphakeme zengozi ezenzeka kanye. Sebenzisa idivayisi zomzimba ezehlukene "nganazwi omuntu wonke" vs "umsebenzi onobudlova" uma kunokwenzeka.

5. Inkambu ephakeme yengozi ekwenzeka kanye (ukuwela umngcele, ukuhlangana nomthombo, ucwaningo ngesihloko). I-Tails ku-USB, iqaline kumshini ohlanzekile, ivalwe ngemuva. Ungaphindi usebenzise i-USB phakathi kwezinhlangano ezehlukile zengozi ngaphandle kokusula i-persistent volume.

6. Ugogo noma okhokho befunda ukusebenzisa ikhompyutha. I-ChromeOS ku-Chromebook ngenye yokuphumulwa, NOMA i-Linux Mint Cinnamon uma kukhona ilungu lomndeni elingakwazi ukumisa ekuqaleni. Gwema i-Windows 11 Home — ukumisa kwe-akhawunti ye-Microsoft ngokwayo kuyadida futhi umsebenzi wokunothisa awufanele ngomsebenzisi oncane.

Lokho esiqhuba khona ngempela

Ukunambitha: iqembu lika-ipdrop.io liquba uhlanganiso — i-macOS yamakliphu/idizayini/umsebenzi wemihla ngemihla, i-Linux Mint kumshini owehlukile wokuthuthukiswa/umsebenzi onobudlova, ne-Tails USB ehokweni esetshenziswa mhlawumbe izikhathi eziyi-3-4 ngonyaka. I-Qubes siyahlonipha kodwa asiyisebenzisi nsuku zonke — ukuxabana kwangempela futhi ithebheli yethu yokushesha ayidingeki.

Noma nikhetha ini, ukushintsha okusemqoka kakhulu ngomfihlo akuyona i-OS — ukuvula ukubethelwa kwedisiki yonke, ukusebenzisa iphathi yamaphasiwedi, nokungahlanganisi amanazwi ezinobudlova esiphequluli sakho semihla ngemihla. Ukukhetha i-OS kuhlaka; imikhuba iyisithombe.

Ezinamahlangothi

Indlela yokwenza noma iyiphi i-OS yedesktop iqine ngomfihlo

Uhlu lokuhlola olumayelana nazo zonke izinkundla olufinyelela izinzuzo zomfihlo zika-80/20 noma iyiphi i-OS ousebenzayo. Izinto eziningi zithatha ngaphansi nehora elilodwa.

  1. Vula ukubethelwa kwedisiki yonke:I-BitLocker (Windows 11 Pro — hhayi i-Home), FileVault (macOS System Settings → Privacy & Security → FileVault), noma LUKS ngesikhathi sokufaka i-Linux. Ngaphandle kwe-FDE, ikhompyutha ephathekayo elahlekile iyephulo lomfihlo. Sebenzisa i-passphrase yaizinhlamvu eziyi-18+ ezingenamhlangano (hhayi iphasiwedi oyikhumbulayo — gcina i-passphrase kuphathi wakho wamaphasiwedi nekhophi yokuphindisela ephrintwe esithakileni somzimba).
  2. Vala i-telemetry ongayidinganga:I-Windows 11 → Settings → Privacy & Security → vala yonke ithogeji ongayisebenzisi ngokuvulelekile; sebenzisa i-O&O ShutUp10++ ngezinguqulo ze-Group Policy ezijulile. macOS → Settings → Privacy & Security → Analytics & Improvements → vala ukwabelana konke. Ubuntu/Fedora → phuma ngesikhathi sokufaka ("Usiza ukuthuthukisa..." izikwele) futhi uvale ukubikwa kwekrashi. I-Linux Mint → akukho okudinga ukuvaliwa, kodwa phinda uqinisekise ngemuva kwezinguquko ezinkulu.
  3. Shintsha isiphequluli sakho esizenzakalelayo kuye ku-Firefox noma ku-Brave, hhayi ku-Chrome/Edge/Safari:I-Chrome ithumela yonke i-URL ku-Google ye-Safe Browsing ngokuzenzakalelayo (kukhona ukukhesha). I-Edge ithumela ku-Microsoft. I-Safari imbi kancane kodwa isaqondisa ku-Apple. I-Firefox ngesikhathi esinzima ne-ad-blocker (uBlock Origin) iwuhlanganiso olungcono kakhulu lomfihlo nokuhambisana. I-Brave inamasethingi anzima kodwa injikelezo ye-ad-network-rewards iphazamisa abanye. Faka isiphequluli KUQALA ku-OS entsha ngaphambi kokungena ezintweni zonke.
  4. Sebenzisa iphathi yamaphasiwedi ngokubethelwa kwaphela phakathi:Proton Pass noma Bitwarden — zombili zomthombo ovulekile, zombili zibethelwe nge-E2E. Vula i-2FA kwiPhathi yamaPhasiwedi ngokwayo. Ungaphinde usebenzise amaphasiwedi. Bheka ukuqhathaniswa kwethu kwe-Proton Pass ne-Bitwarden ukuthi ukhethe eliphi.
  5. Engeza VPN kwizinethiwekhi ezingathenjiwe (futhi cabanga ukuyivula njalo):I-ISP yakho / izivumelwano zekhofi / isikhumulo sezindiza / inethiwekhi yomqashi ingazibona yonke izizinda oza kuzo. I-VPN (Proton VPN noma Mullvad, hhayi ezamahhala) ibethelwa ukuya kuservu ye-VPN futhi ishintshe i-ISP yakho ngomlamuli othenjwayo. Ngomfihlo ikakhulukazi — hhayi ukuvula izindawo ze-geo kuphela — cabanga ukuyishiya ivuliwe ngisho nasekhaya.
  6. Misela i-backup yedatha yamafu ebethelwe noma ume ukuvumelanisa izifolda ezinobudlova kumafu:Uma useWindows 11 i-OneDrive ivuliwe ngokuzenzakalelayo futhi iscanela yonke ifayela oyifaka kuzifolda zakho Zamadokhumenti. I-macOS yenza okufanayo ne-iCloud Drive ngaphandle uma uphuma. Izinketho, zihlelwe ngomfihlo — (a) i-backup wendawo kudrayivu yangaphandle ebethelwe kuphela, (b) Proton Drive ngokubethelwa kwazo kwe-zero-access, (c) Bitwarden Send noma Magic Wormhole ngokuguqulela okubethelwe okwehlukene. Vala ukuvumelanisa kwamafu okuzenzakalelayo nganoma iyiphi ifolda equkethe amadokhumenti ezezimu, ezempilo, noma ezamazwe..
  7. Hlola izandiso zesiphequluli nezinhlelo ezifakiwe ngaphansi kwalelo nalelo nyanga ezintathu:Izandiso zindlela yokukhipha edumile — imvume efanayo evumela i-ad-blocker ukufunda ikhasi ngalinye nazo inika izandiso ezikhohlakalisiwe amandla afanayo. Ngemalanga angamashumi amane nantathu ngamashumi amane nantathu, hlola izinto ezintathu — izandiso zesiphequluli ezifakiwe (susa noma yini ongayisebenzisanga ezinsukwini ezingama-30), izinhlelo ezifakiwe (susa noma yini ongayazi), kanye nohlu lwakho lwe-apps ezihlangene ze-"Sign in with Google / Facebook / Apple" (khipha ezindala).
  8. Yenza izinsizakalo zendawo zivumekile ngenhlelo ngayinye:Ku-OS yonke, ya ku-Settings → Privacy → Location Services bese useta okuzenzakalelayo ku-"Deny" kwezinhlelo ngaphandle uma kudingeka ngokuqondile (isib. i-Maps, i-Weather). Isiphequluli akudingeki sazi indawo ngaphandle uma ucofele isikhundla se-"allow" esizindeni esikhethekile. I-macOS ne-Linux zenza lokhu kahle; i-Windows 11 idinga ukuphenduleka okuthe xaxa ngoba izinhlelo eziningi ezifakiwe ngokuzenzakalelayo zisetwa ku-"Allow".
  9. Ngemfihlo enkulu, ahlukane amanazelo ezidivayisi ezehlukile:Ukuphila kwemfihlo okuhle kakhulu ukuyeka ukuhlanganisa ubunikazi bomuntu siqu nobunikazi bomsebenzi/obuchwepheshe edivayisini efanayo nomahlelo esiphequluli. Sebenzisa amamakhrofayili esiphequluli ahlukene ane-cookie isolation enobuchwepheshe, noma ngcono — idivayisi yesibili yomzimba (ikhompyutha ephathekayo endala iqhuba i-Linux Mint i-$100-200 esetshenzisiwe) ngocwaningo oluzimele, amabhange, amaphephandaba. I-Qubes OS yenza lokhu ku-OS level nge-Xen VMs, kodwa ngisho "izikhompyutha ezimbili" zikufika ku-90% kwendlela.

Imibuzo Ebuzwa Kaningi

Izindatshana ezihlobene