Justification for moving over

I'm looking for a secure os that will run on my cheap laptop, Openbsd fits the bill (it has enough apps that I need), but my question is since I'm going to use it on my laptop does that make openbsds security redundant? Could I just use hardened MX-Linux / Debian XFCE if I'm just going to run basic desktop tasks? (Webbrowsing, checking emails, running keepassx etc.) Is corporate influence on linux really such a big deal for me to move over to Openbsd?

>>16347 Define "secure" or are you misinterpreting privacy and security like everyone else. You can't have a "secure" device if you know jacksoykaf about security the ways that others could break it which is a never ending journey of learning, researching, and discovery. Go read up documented vulnerabilities. They're usually unbelievable but that's how they break even the security of large companies. Usually tech news sites are a useful introduction if you don't know soykaf. You could have a hardened Linux distribution, or Openbsd install with unique encryption you made yourself along with custom file system you developed yourself too but still use a proprietary wifi router which could be attacked with WPS pin flaws https:// 3wifi.stascorp.com/wpspin or even the fact that you're using a 12 length alphanum password which every tech website claim is VERY secure but in reality someone would capture your eapol pckts, and try to bforce the dump file instead which every tech website claims "200+ years to crack" but actually can be done in just two days or hours When thinking about security you have to consider everything, even devices you do not own. Same goes with privacy and anonymity. If you just want total security you might as well isolate the device from the internet or limit its internet usage/exposure.

>>16383 Nice copypasta. Not what OP is looking for however. >reading about random vulnerabilities makes anything at all more secure >arsetechnica is a good source of information So this is what all those larpers have in their head.

>>16347 >your EAPOL pckts, and try to bforce the dump file That's mainly an issue if OP uses a wifi router, and even if it did get pwn'd, so long as they have the initial certificate pins and simply switch over to DoH, there's very little the router can actually do besides DoS. >using a 12 length alphanum password KeepassXC exists, who bothers to come up with human-memorizable passwords for sites anymore? (That's rhetorical, I know chainiks still do.) Though it is obvious OP is new to this. >>16347 What you can do on a cheap device is limited, only so much isolation you can actually get done within a single system. Qubes' idea is the way to go I think, but its requirements proscribe most cheap hardware. So for normal Linux distros, you have to rely on user-level isolation and MAC for the most part. A distro that's serious about security updates is a good start, but the problems with CVE-reporting means their respective security teams might not even be aware of an issue because no one managed to publish a CVE for it.