Taƙaitaccen amsa
Idan sirri shine fifikon farko kuma kuna shirye ku canza halaye:
- Tsarin barazana mai tsanani (ɗan jarida yana kare tushe, mai fafutuka a cikin jiha mai gaba, mai binciken tsaro): Qubes OS don amfani na yau da kullun + Tails akan keɓaɓɓen USB don zaman haɗari mai girma ɗaya-ɗaya.
- Mai mayar da hankali kan sirri amma mai aiki (kuna son kwamfyutar da ta yi kama da al'ada wacce ba ta kiran gida ba): Linux Mint — tsarin software na Ubuntu mai daidaituwa, an cire ƙarin Canonical, saitunan ra'ayi.
- Mafi kyawun tsarin aiki na kasuwanci don sirri: macOS Sequoia tare da Advanced Data Protection da aka kunna. Ajiyar tushen da aka rufe ta shafi, amma saitunan sun fi Windows kuma tsaron na'ura yana da kyau.
- Dole ne ku yi amfani da Windows don aiki: Windows 11 Pro (ba Home ba) tare da Group Policy, BitLocker, Firefox, da gagarumin aikin karawa. Yana yiwuwa a gudanar da Windows 11 mai ma'ana mai kyau — kawai kuna ciyar da karshen mako guda a saita shi, kuma yana komawa kowane babban sabuntawa.
Duk abin da ke ƙasa shine daki-daki a bayan wannan jerin — abin da kowane OS ya yi ta tsoho, abin da za ku iya canzawa, da abin da ba za ku iya ba.
Windows 11 — tushen adawa da sirri
Windows 11 shi ne mafi munin zaɓuɓɓuka na yau da kullun, ba saboda mugun nufi ba, amma saboda tsarin kasuwanci na Microsoft yana ɗaukar OS azaman samfurin bayanai. Takamaiman:
Bukatun asusu. Windows 11 Home yana buƙatar asusu Microsoft yayin saiti. Hanyoyin kauce wa asusu na gida (umarnin OOBE\BYPASSNRO, dabaran no@thankyou.com) ana ci gaba da gyara su cikin sabuntawa na yau da kullun. Windows 11 Pro har yanzu yana barin asusun gida yayin saiti idan kun zaɓi hanyar "haɗin yanki".
Telemetry. Matakan biyu: "Bayanan bincike da ake buƙata" (ko da yaushe-kunne, ba za a iya kashewa ta hanyar Settings UI ba — Group Policy yana barin ku taƙaita shi, amma wasu sigina har yanzu suna gudana) da "Bayanan bincike na zaɓi" (cikakken telemetry na matakin bincike da za ku iya kashe amma yana KUNNE ta tsoho). Microsoft yana buga ƙamus na bayanai, wanda ya fi yawancin masu samar da OS, amma tushen shine "Microsoft ya san abin da kuke yi".
Copilot + Recall. Recall (akan Copilot+ PCs tare da NPUs) yana ɗaukar hotuna na screen ɗinku kowane daƙiƙa kaɗan, yana OCR su, kuma yana gina index na gida mai bincike. Bayan tarzomar tsaro na Yuni 2024, Microsoft ya mai da shi opt-in, ya ɓoye bayanan, kuma ya buƙaci auth Windows Hello don tambayar shi. Ƙarfin da ke ƙasa ya rage a haɗe cikin OS. Kowane babban sabuntawa yana sake buɗe tambayar "shin Recall da gaske har yanzu opt-in ne?" Copilot da kansa yana aika tambayoyi zuwa Azure OpenAI sai dai kun kashe aikin kai tsaye.
Saitunan OneDrive. Sabbin shigarwa a hankali suna karkatar da Takardunku, Hotunanku, da Desktop cikin %OneDrive%\ kuma suna farawa sync. Miliyoyin masu amfani suna da fayilolin sirrinsu a cikin gajimare na Microsoft ba tare da yanke shawara mai hankali don upload su ba.
Edge + Bing. Browser na tsoho yana aika tambayoyi zuwa Bing. Edge yana da halayen sirri masu amfani (toshe tracker, InPrivate) amma halayensa na tsoho ya haɗa da aika URLs zuwa Microsoft Defender SmartScreen.
Abin da za ku iya yi. Windows 11 shine OS mafi ƙarfin iya karantawa saboda akwai abubuwa da yawa da za a kashe:
- Shigar da asusu na gida (Pro ko registry tweak akan Home)
- Gudanar da O&O ShutUp10++ — lissafin da aka tsara na toggles na sirri 100+ tare da saitunan "da aka ba da shawarar". Yana amfani da Group Policy + canje-canjen registry waɗanda ke rayuwa sabuntawa.
- Kashe saitunan OneDrive yayin shigarwa, cire shi gaba ɗaya idan ba a yi amfani da shi ba
- Maye gurbin Edge da Firefox ko Brave; canja binciken tsoho zuwa DuckDuckGo, Kagi, ko Startpage
- Cire Cortana, Teams Consumer, da apps na Xbox idan ba a yi amfani da su ba
- BitLocker (Pro kawai) ko VeraCrypt (Home) don FDE
- Group Policy: Computer Configuration → Administrative Templates → Windows Components → Data Collection
Bayan wannan zirga-zirga, Windows 11 ana iya mai da shi kusan sirri kamar Ubuntu da ba a gyara ba. Harajin da ke gudana shine sake duba saitunanku bayan kowane Sabuntawa na Fasali (20H2, 22H2, 23H2, 24H2 kowane ya sake gabatar da wasu halaye).
macOS Sequoia 15 — mafi kyawun tsarin aiki na kasuwanci don sirri
macOS Sequoia ya fi Windows 11 kyau ta tsoho, amma "mafi kyau fiye da Microsoft" ba daidai ba ne da "sirri".
Telemetry na Apple — Analytics, Device Analytics, da iCloud Analytics — kashe ne ta tsoho akan sabon shigarwa a EU (GDPR), a kunne ta tsoho a Amurka (kuna iya kashe su a Settings → Privacy & Security → Analytics & Improvements). Apple yana buga manufar sirrinsu kuma yana yin takamaiman da'awar game da aiki akan na'ura, amma ba za ku iya tabbatar da waɗannan da'awar ba saboda OS ba a buɗe tushe ba.
Saitunan iCloud. Hotuna, Lambobi, Kalanda, da iCloud Drive sync ta tsoho idan kun shiga da Apple ID. Saƙonni a cikin iCloud ya kashe sai an kunna. Advanced Data Protection (iCloud da aka ɓoye ƙarshe-zuwa-ƙarshe don yawancin sassan — Hotuna, Rubutun, Drive, backup) shine opt-in kuma yana buƙatar iOS 16.2+ / macOS 13+ akan dukkan na'urorinku. Apple a zahiri yana rage muhimmancinsa yayin saiti saboda kunna shi yana nufin Apple ba zai iya dawo da bayanunkumu ba idan kun rasa dama.
Siri + Spotlight. Tambayoyi ana aika su zuwa Apple don warwarewa. Apple ta ce an boye su kuma ba a haɗa su da Apple ID ɗinku ba. Kuna iya kashe "Shawarwarin Bincike daga Apple" a Safari don dakatar da bugawa na URL-bar daga kaiwa ga uwar garken Apple.
Apple Intelligence (da aka ƙara 2024). Galibi akan na'ura don ƙananan samfura, amma wasu tambayoyi suna zuwa kayan aikin "Private Cloud Compute" na Apple. PCC yana amfani da tabbataccen hardware da binaries da aka buga — gaskiya sabuwar gine-ginen sirri. Opt-in ne a EU, opt-in a ko'ina kuma kamar macOS 15.
Gatekeeper + sa hannu kan lamba. Kowane app da kuke gudanar da shi yana samun dubawa na sa hannu akan sabis na notary na Apple. Apps na farko-gudana suna kiran gida da hash na Developer ID — Apple na iya (a ra'ayi) yi rajistar abin da kowane Mac ke gudana da lokaci. Wannan fasali ne na tsaro (yana kama da sanannun apps masu ban haushi) tare da farashin sirri. sudo spctl --master-disable yana kashe tilasta sa hannu amma ba a ba da shawarar ba.
Karfin.
- Apple Silicon + Secure Enclave = karfin tsaron na'ura, buɗe biometric da aka ɗaure ga hardware
- Apps na App Store suna da alamun sirri (mai haɓakawa ya tabbatar da kansa, amma har yanzu yana fito da bayanai)
- Tsarin izini mai tsanani — apps dole su yi tambaya kafin karanta lambobi, kalanda, kamara, mic, wuri
- FileVault (FDE) yana da sauƙin kunna kuma yana amfani da Secure Enclave
- Babu tilastaccen anti-virus da ke kiran gida
Raunin.
- Tushen da aka rufe — da'awar sirri kalmar Apple ce
- iCloud opt-outs an warwatse su akan panels na Settings
- Saitunan Advanced Data Protection mai juye-juye (Apple a zahiri yana sa ya yi wahala a kunna)
- Hardware lock-in — idan kun damu sosai game da sirri don tabbatar da shi, tabbas kuna son kasancewa akan Linux da za ku iya bincika
Saiti na aiki. Sabon shigarwa → ƙi analytics na zaɓi → kunna FileVault → kunna Advanced Data Protection idan dukkan na'urorinku suna tallafawa → shigar da Firefox → kada ku shiga iCloud har sai kun yanke shawara daidai nau'ikan da za ku sync.
Ubuntu 24.04 LTS — Linux da aka fi sani da shi
Ubuntu shine mafi yawan Linux distribution a kan desktops kuma daidaitattun tushen sirri. Canonical yana da tarihin gauraye akan wannan batu.
Lens Amazon na 2013. Na ɗan gajeren lokaci, binciken Dash na Ubuntu Unity ya aika tambayoyi zuwa Amazon don "lenses" na sakamakon sayar. Wannan ya haifar da rikice-rikicen amincewa na shekaru masu yawa a cikin al'umma. An cire fasalin a 16.04 kuma Canonical bai maimaita shi ba. Ya cancanci sanin saboda yana launin yadda dogon lokaci masu amfani da Linux ke jin game da Ubuntu.
Telemetry na yanzu.
- Rahoton Ubuntu — takaitaccen hardware/software na bazuwa ɗaya, da ba a bayyana ba wanda aka aika yayin shigarwa. Opt-in; kuna ganin umarnin kafin ya gudana.
- Apport — rahoton faɗuwa. Kashe ta tsoho akan fitarwa; kuna shiga kowane faɗuwa.
- Livepatch — gyare-gyaren kernel mai zafi. Opt-in; yana buƙatar biyan kuɗi na Ubuntu Advantage.
- PopCon — gasar shahararriyar fakiti. Kashe ta tsoho.
- Snap telemetry — Kantin snap na Canonical yana tattara ƙididdigar shigarwa/sabuntawa. Ƙasa da telemetry na browser amma har yanzu kiran Canonical don kowane shigar snap.
ubuntu-advantage-tools nag screens. Sabbin sigogin Ubuntu sun ƙara shawarwarin "motd" lokacin da kuke SSH ko buɗe terminal, suna tallata Ubuntu Pro. Mai damewa amma ba batun sirri ba (babu bayanan fita). An cire ko shuru a 24.04 ta saita ENABLED=0 a /etc/default/ubuntu-advantage-tools.
Snap vs apt. Ubuntu 22.04+ yana kai Firefox azaman fakitin snap. Kantin snap yana magana da uwar garken Canonical; gargajiyar fakitocin apt suna magana da duk mirror da kuka saita. Idan "komai ta hanyar Canonical" routing ya dame ku, ko dai ku canza zuwa Firefox apt package na ppa:mozillateam/ppa, ko shigar da Firefox kai tsaye daga flatpak.
Karfin. Tushen da aka buɗe, mai iya bincikarwa, babban zaɓin fakiti, kyakkyawan goyan bayan hardware, Wayland ta tsoho a 22.04+, GNOME 46 tare da daidaitattun saitunan sirri.
Raunin. Bukatu na kasuwanci na Canonical wani lokaci suna nuna bayanai na mai amfani; Snap telemetry ba za a iya gujewa ba idan kuna amfani da snaps; tallace-tallacen "Ubuntu Advantage" ana iya ganinsu.
Saiti na aiki. Sabon shigarwa → ƙi Rahoton Ubuntu → kashe Apport → kashe PopCon → maye gurbin Snap Firefox da apt Firefox ko Flatpak → kunna LUKS FDE yayin shigarwa → Firefox tare da uBlock Origin.
Fedora 41 — Linux na farko-upstream
Fedora shine rabon al'umma na Red Hat (IBM), da ake amfani da shi azaman upstream don RHEL. Dangane da sirri yana kama da Ubuntu tare da wasu bambance-bambance.
Babu kwatankwacin Canonical. Red Hat / IBM ba sa tallata biyan kuɗi na "Advantage" ga masu amfani da desktop; lasisin kamfani yana rayuwa akan RHEL, ba Fedora ba. Babu allon nag, babu tilastaccen shawarwarin haɓakawa.
Telemetry na tsoho. Kaɗan. Rahoton Fedora (ƙidayar hardware) ana gabatarwa a 42 — muhawarar al'umma da ke gudana, matsayin yanzu opt-in ne. ABRT (rahoton faɗuwa) opt-in ne; za ku ga sanarwa lokacin da faɗuwa ya faru kuma za ku iya yanke shawara ko za ku gabatar.
SELinux yana aiwatar da ta tsoho. Wannan fasali ne na tsaro, ba sirri per se ba — yana ƙunsar mallakar matakin tsari don haka abokin aiki da aka lalata ba zai iya karanta komai akan tsarinku ba. Ubuntu yana amfani da AppArmor don manufa ɗaya amma a cikin mafi yawan yanayin bada izinin tsoho. SELinux ya fi tsanani.
Flatpak + dnf. Manajan fakitin Fedora. Flathub flatpaks suna magana da Flathub CDN (ba siginar telemetry ba, kawai saukowa); dnf yana magana da madauran Fedora.
Wayland na farko. Kowane desktop spin (GNOME, KDE, XFCE, da dai sauransu) yana zuwa da Wayland azaman zaman tsoho, wanda ke da kyakkyawan keɓewa tsakanin apps na GUI fiye da X11 (apps ba za su iya screenshot / keystroke-sniff juna ba).
Karfin. Babu tsarin kasuwanci kamar na Canonical, SELinux yana aiwatar, saurin bin diddigin upstream (kernel/Mesa/GNOME duk sun fi Ubuntu sabo).
Raunin. Bleeding-edge na iya nufin "wani abu ya karye saboda koma bayan direba"; shekarar goyan baya 13-mace kowane fitarwa vs Ubuntu LTS na shekaru 5.
Saiti na aiki. Sabon shigarwa → ƙi rahotannin faɗuwa (kuna samun umarnin lokacin farko ɗaya ya harba) → kunna LUKS yayin shigarwa → Firefox an riga an shigar da shi kuma ba flatpak ba ne akan Fedora Workstation.
Linux Mint 22 — mafi kyawun Linux na sirri-ta-tsoho
Linux Mint shine debloat na Ubuntu mai dogon gudu. Suna ɗaukar Ubuntu LTS na upstream, suna cire ƙarin Canonical, suna maye gurbin desktop da Cinnamon (ko Xfce / MATE), kuma suna kai shi. Abin da kuke samu:
Babu Snap ta tsoho. Mint a sarari yana cire snap kuma yana toshe apt daga shigar da snap daemon. Firefox ana shigar da shi azaman fakitin apt na yau da kullun daga Mozilla's PPA. Babu allon nag.
Babu Rahoton Ubuntu, babu ubuntu-advantage-tools. Mint yana kashe ko cire sassan Canonical-kasuwanci.
Babu telemetry. Mint da kansa ba ya kiran gida. Rahoton faɗuwa ya kashe. Manajan sabuntawa yana magana da madauri na Mint don sabuntawa — daidaitaccen zirga-zirgar manajan fakiti — amma ba ya ba da rahoton amfani.
LMDE fallback. Idan kuna son sigar Mint ta Canonical-free, LMDE (Linux Mint Debian Edition) yana amfani da Debian Stable azaman tushe. Irin wannan kwarewar desktop, tushen upstream daban.
Cinnamon. GNOME fork da ke ba da fifiko ga gargajiyar desktop kamar Windows. Ƙasa da "zamani" fiye da GNOME, ƙasa da keyboard-driven fiye da KDE, amma mai kusancewa ga masu amfani da ke canzawa daga Windows.
Karfin. Mafi conservative saitunan sirri na kowane distro na yau da kullun. Babban al'umma. Kwanciyar hankali. Kyakkyawan goyan bayan hardware ta hanyar tushen Ubuntu.
Raunin. Ya jinkiri wajen karɓar sabuwar fasaha (Wayland har yanzu opt-in ne kamar Mint 22, default zuwa X11). Cinnamon yana da ƙarancin masu ba da gudummawa fiye da GNOME ko KDE. Ubuntu upstream yana nufin kuna gada kwari na Ubuntu, kawai ba telemetry sa ba.
Saiti na aiki. Sabon shigarwa → kunna LUKS yayin shigarwa → sabuntawa → shigar da Firefox (ya riga ya nan) + uBlock Origin → shi ke nan. Mint shine distro inda "shigarwa da amfani" yana ba ku daidaitaccen matsayi na sirri ba tare da ƙarin aiki ba.
Qubes OS 4.2 — rarrabuwa azaman tsarin barazana
Qubes yana cikin nau'in nasa. Maimakon ƙoƙarin sa OS ɗaya ya fi sirri, Qubes yana ɗauka cewa kowane tsarin guda ɗaya za a lalace kuma yana keɓe yankin fashewar ta amfani da virtualization.
Yadda yake aiki. Qubes yana gudana akan hardware na fili ta hanyar Xen hypervisor. Kowane "VM" (da ake kira qube a cikin kalmominsu) yana gudanar da Linux userspace na iya zubarwa — yawanci Fedora ko Debian templates. Lokacin da kuka danna haɗin email, yana buɗewa a cikin DisposableVM da aka halaka bayan kun rufe shi. Banking ɗinku yana faruwa a cikin AppVM nasa da hanyar sadarwa kawai zuwa bankin ku. Binciken haɗin bazuwa yana faruwa a cikin Whonix-Workstation qube wanda ke hanya ta Tor.
Farashin UX. Copy-paste tsakanin qubes yana buƙatar gajeriyar hanya ta keyboard (Ctrl+Shift+V) wacce ke tabbatar da canja wuri. Fayilolin da aka motsa tsakanin qubes suna ta hanyar keɓaɓɓen FileCopy dialog. Kuna rasa "komai kawai yana aiki akan desktop ɗaya" zato na OS na al'ada — amma kuna samun ainihin iyakokin tsaro.
Kaddarorin tsaro.
- Mallakar browser a cikin work qube ba zai iya kaiwa ga fayiloli a cikin qube na sirri ba.
- PDF reader da aka lalata ba zai iya exfiltrate wallet ɗin crypto ba.
- USB thumb drive da aka toshe ana hawa shi a cikin keɓaɓɓen sys-usb qube — idan an loɗe shi da malware, ya bugi DisposableVM, ba dom0 ba (yankin sarrafa amanci).
- dom0 ba shi da hanyar sadarwa kwata-kwata; a zahiri ba za ku iya gudanar da browser akan dom0 ba.
Bukatun hardware. 16 GB RAM mafi ƙanƙanta (Qubes yana ba da shawarar 16 GB), 32 GB na aiki. SSD mai sauri (an fi so NVMe). Intel CPUs tare da VT-x + VT-d; takamaiman laptops suna akan lissafin daidaituwar hardware (sabbin Thinkpads, Framework, System76 Oryx Pro).
Haɗin Tor ta hanyar Whonix. A fili, Qubes yana zuwa da samfuran Whonix — tsarin VM biyu inda VM ɗaya ke yin hanyar Tor ɗaya kuma ɗaya yana gudanar da browser ɗinku, ba tare da hanyar browser ɗin koyo da ainihin IP ba ko da an yi amfani da shi gaba ɗaya. Mafi kyawun tsarin gine-ginen Tor gajeren Tails.
Karfin. Tsarin tsaro na zinare don masu amfani masu babban barazana. Tushen da aka buɗe. Snowden da 'yan jarida masu daraja suna amfani da shi a bainar jama'a.
Raunin. Koyan hanya mai tsayi (makonni 2-4 don jin daɗi). Bukatun hardware masu nauyi. Ƙarancin goyan bayan hardware — takamaiman lissafin laptops maimakon "yawancin hardware na zamani". Babu software na kasuwanci; kuna kan Linux apps kawai.
Saiti na aiki. Jagorar shigarwa na Qubes da kanta tana da kyau. Kasafin karshen mako don shigarwa ta farko da koyan tsarin qube. Haɗa da laptop mai daidaituwa (duba lissafin HCL — kada ku sayi hardware na bazuwa).
Tails 6.x — zaman amnesia akan USB
Tails (The Amnesic Incognito Live System) shine Debian-based live OS wanda ke farawa daga USB kuma yana mantawa da komai lokacin da kuka rufe. Kowane haɗin fita ana tilasta shi ta hanyar Tor — idan kwaro a cikin app ya yi ƙoƙarin yin haɗin kai tsaye, ya gaza maimakon ɓoyewa.
Yadda kuke amfani da shi. Fara injin da aka yi niyya daga Tails USB. Yi amfani da shi. Sake kunna. Hard drive na injin ba a taɓa sa hannu ba (sai dai kun zaɓa kai tsaye). Babu alamar zaman da ya rage a ko'ina sai dai a cikin ƙwaƙwalwar ɗan adam.
Ajiyar ci gaba. Opt-in, akan USB ɗaya, da aka ɓoye da LUKS. Yana barin ku riƙe takamaiman babban fayil, saitunan gadar Tor, da gajeren lissafin apps akan sake kunna. Komai kuma yana kasancewa amnesia.
Hanyar Tor. Duk zirga-zirga. Babu "split tunnel", babu "domain-based exemption". Apps waɗanda ba za su iya amfani da Tor ba kawai ba za su iya haɗawa ba. Wannan tsanani ne kuma lokaci-lokaci mai damewa (wasu shirye-shiryen video conference sun karye, yawancin shafukan banking suna toshe fitar Tor) amma shi ne kadarar tsaro.
Karfin. Amnesia ta ƙira — bacewar USB ba ya ɓoye zaman ku. Tor ta tsoho — babu hanyar bazuwa ta IP ɗinku na gaske. Ƙaramin saman hari — ƙarancin stack na software. Ana kula da shi da kyau ta hanyar kungiya mara riba.
Raunin. Ba matukin yau da kullun ba. Farawa daga USB ya fi jinkiri. Zaɓin software da gangan ya iyakance. Jinkirin Tor yana karya yawancin ayyukan kasuwanci. Babu tsayuwar yanayin tsari akan sake kunna sai kun zaɓa.
Mafi kyau don.
- Ketare iyakoki (sake farawa cikin al'ada OS kafin kwastam)
- Saduwa da tushen jarida
- Bincike kan batun mai damuwa da bai kamata ya haɗa da asusu na yau da kullun ba
- Kowane zaman inda "abin da kuke yi yanzu ba dole ba ne ya haɗu da wanda kuke sauran lokaci"
Saiti na aiki. Sauke Tails daga tails.net, tabbatar da sa hannu (mai muhimmanci), flash zuwa USB ≥ 8 GB, farawa injin da aka yi niyya daga gare shi (yana iya buƙatar gyaran BIOS/UEFI). Saita kalmar sirri ta admin idan kuna buƙatar gudanar da umarnin sudo yayin zaman.
Tebur na kwatancewa
| OS | Telemetry (tsoho) | Asusu da ake buƙata | Tushen da aka buɗe | FDE tsoho | Saitunan gajimare | Makin sirri |
|---|---|---|---|---|---|---|
| Windows 11 Home | Ko da yaushe-kunne + opt-out kawai | Eh (Microsoft) | A'a | Wani lokaci (Device Encryption ta atomatik) | OneDrive kunne | ★☆☆☆☆ |
| Windows 11 Pro | Mai raguwa ta Group Policy | A'a (zaɓin haɗin yanki) | A'a | Eh (BitLocker) | OneDrive kunne | ★★☆☆☆ |
| macOS Sequoia | Opt-out a EU, kunne ta tsoho US | Ana ba da shawarar (Apple ID) | A'a | A'a (mai amfani dole ya kunna FileVault) | iCloud kunne don Hotuna | ★★★☆☆ |
| Ubuntu 24.04 | Opt-in na lokacin shigarwa kawai | A'a | Eh | Na zaɓi a shigarwa | Babu (snap telemetry) | ★★★★☆ |
| Fedora 41 | Rahotannin faɗuwa na opt-in | A'a | Eh | Na zaɓi a shigarwa | Babu | ★★★★☆ |
| Linux Mint 22 | Babu | A'a | Eh | Na zaɓi a shigarwa | Babu | ★★★★★ |
| Qubes OS 4.2 | Babu | A'a | Eh | Eh (LUKS tilas) | Babu | ★★★★★ |
| Tails 6.x | Babu | A'a | Eh | Vol mai ci gaba na zaɓi | Babu (hanyar Tor) | ★★★★★ |
(Taurari daidaitattun haɗin "nauyin telemetry + hukuncin tushen da aka rufe + FDE tsoho + cloud-lock-in" ne. Ba kawai abin da ke da muhimmanci ba — Windows 11 Pro da aka karanta zai iya zama mafi sirri fiye da shigarwar Ubuntu mara kyau.)
Shawarar mu ta amfani
1. Mai sha'awar sirri wanda kuma yana buƙatar software na yau da kullun (Adobe, gaming, Office, Zoom, da dai sauransu). Windows 11 Pro tare da BitLocker + O&O ShutUp10++ + Firefox + asusu na gida. Ko dual-boot Windows don apps waɗanda suke buƙatar sa da Linux Mint don komai.
2. Ma'aikacin ilimi, mai haɓakawa, ɗalibi, marubuci. Linux Mint tare da LUKS + Firefox + uBlock Origin. Kashi casa'in na ayyukan Windows/macOS suna yin ramani da kyau zuwa Mint. LibreOffice don yawancin takaddun, OnlyOffice idan kuna buƙatar daidaituwar Microsoft Office mafi kyau.
3. Mai ƙirƙiran abun ciki / mai zane wanda ke amfani da Adobe Creative Cloud. macOS Sequoia tare da FileVault + Advanced Data Protection + Firefox. Goyan bayan Adobe yana gaske akan macOS; yana da wahala akan Linux (Wine/Bottles suna aiki don wasu apps, ba duka ba). Aikin Apple Silicon akan aikin bidiyo da gaske shine mafi kyau na zaɓuɓɓuka na kasuwanci uku.
4. Dan jarida / mai fafutuka / mai bincike wanda ke sarrafa abu mai damuwa. Qubes OS akan hardware mai daidaituwa don aikin yau da kullun + Tails akan USB don zaman haɗari mai girma ɗaya-ɗaya. Yi amfani da keɓaɓɓun na'urori don "asusu na jama'a" vs "asusu na aiki mai damuwa" idan mai yiwuwa.
5. Zaman haɗari lokaci-lokaci mai girma (ketare iyaka, saduwa da tushe, bincike kan batu). Tails akan USB, da aka farawa akan injin mai tsabta, rufewa daga baya. Kada ku sake amfani da USB akan mabanbantan yanayin haɗari ba tare da goge kundin ajiyar da aka ci gaba ba.
6. Kakan da ke koyon amfani da kwamfyuta. ChromeOS akan Chromebook don sauƙi, KO Linux Mint Cinnamon idan akwai kowane memba na iyali wanda zai iya yin saitunan farko. Ku guji Windows 11 Home — saitunan asusu Microsoft kawai suna da rudani kuma aikin tsaftacewa ba shi da daraja ga mai amfani mai haske.
Abin da muke amfani da shi a zahiri
Cikakken bayani: ƙungiyar ipdrop.io tana gudanar da gauraye — macOS don abun ciki/zane/aikin yau da kullun, Linux Mint akan keɓaɓɓen injin don haɓakawa/aiki mai damuwa, da Tails USB a cikin drowa da ake amfani da shi watakila sau 3-4 a shekara. Qubes muna girmamawa amma ba mu amfani da shi yau da kullun ba — juye-juye yana gaske kuma tsarin barazana ba ya buƙatar sa.
Duk abin da kuka zaɓa, mafi muhimmancin motsin sirri ba OS ba ne — yana kunna cikakken ɓoyewar faifai, amfani da manajan kalmar sirri, da rashin haɗa asusun sirri cikin browser na yau da kullun. Zaɓin OS shine firam; halaye shine hoton.
Masu alaƙa
- Lissafin Dubawa na Sirri — matakai 20 don bincika asusunanku
- Menene VPN? — Layer sama da OS don sirrin hanyar sadarwa
- Email da aka Ɓoye — Proton Mail, Tutanota, Mailbox.org da aka kwatanta
- Ajiyar Fayil da aka Ɓoye — Proton Drive, Tresorit, Sync.com da aka kwatanta
- Proton Pass vs Bitwarden — zurfin manajan kalmar sirri