Another question on running crouton linux on chromebook i.e PRIVACY

metadata · 09-27-2016, 06:59 PM

Hi linux fans

I am aware that using chromebooks has it's own privacy issues like information gathering but to a lesser extend than windows 10. If I run linux via crouton, is my chroot environment isolated from ChromeOS's private policy terms and it's information gathering? Thanks

rokytnji · 09-28-2016, 07:55 AM

It is not what you think when it comes to privacy issues. Read and learn.

https://github.com/dnschneid/crouton/wiki/Security

Quote:

Of course, without arbitrary code execution, crouton can't work. So you enable dev mode.

Dev mode out of the box does several things that compromise security, including disabling verified boot, enabling VT2, and activating passwordless root shell access. This means even without crouton, if you're in dev mode, someone can switch to VT2, log in as root and add a keylogger that runs at startup, then switch back without you knowing. If you're logged in, they can also access the unencrypted contents of your Chrome profile and copy it elsewhere. If an exploit to Chrome is found, verified boot will no longer protect you from persistent compromises. Essentially, dev mode by default is less physically secure than a standard laptop running Linux*.

crouton adds a huge attack vector to the system by running a lot of unvetted code (i.e., all of Debian/Ubuntu/whatever). While it tries pretty hard to keep things restricted for non-root and installing and running as few things as possible, fundamentally there's nothing about a chroot that prevents a process with root access from escaping the chroot and compromising Chromium OS itself. So any remote root exploit anywhere in your Linux distro of choice now could be used to compromise Chromium OS.

You might not like what you read.

It is one reason my chromebook stays chromeos only. My linux laptops are linux only. My Windows laptop is Windows only.

If I decide to dual boot. I boot off a external drive like a sd card or usb.
Like so

That was just a exercise to see how low I could go.
I have since sold that gear and do not have it anymore.

Germany_chris · 09-28-2016, 10:37 AM

I'm just installed crouton on my pixel and I'm updating it now.

metadata · 09-28-2016, 03:57 PM

Quote:

Originally Posted by rokytnji

It is not what you think when it comes to privacy issues. Read and learn.

https://github.com/dnschneid/crouton/wiki/Security

You might not like what you read.

It is one reason my chromebook stays chromeos only. My linux laptops are linux only. My Windows laptop is Windows only.

If I decide to dual boot. I boot off a external drive like a sd card or usb.
Like so

That was just a exercise to see how low I could go.
I have since sold that gear and do not have it anymore.

Hi rokytnji, great info about the security when using crouton. I wasn't aware of that. I guess I might install linux to a external usb/eMMc card and then boot off of that. I saw a youtube video on enabling legacy boot and booting off a usb.

+1 rep

metadata · 09-28-2016, 05:13 PM

Hi, I have one last question concerning linux in chromebook.

If I boot linux off a usb drive, is the wifi card automatically configured or do I have to manually do it. BTW, what is the wifi driver used on the Asus C300SADS02, I just ordered it today online. Thx

Timothy Miller · 09-28-2016, 05:41 PM

Quote:

Originally Posted by metadata

Hi, I have one last question concerning linux in chromebook.

If I boot linux off a usb drive, is the wifi card automatically configured or do I have to manually do it. BTW, what is the wifi driver used on the Asus C300SADS02, I just ordered it today online. Thx

I THINK it's going to be iwlwifi, that system is most likely using Intel wireless, however on a 10 second search I didn't find for certain if it is. I know similar machines I've owned (several, but they were bay trail not braswell) all had Intel wireless.

metadata · 09-28-2016, 09:19 PM

Quote:

Originally Posted by Timothy Miller

I THINK it's going to be iwlwifi, that system is most likely using Intel wireless, however on a 10 second search I didn't find for certain if it is. I know similar machines I've owned (several, but they were bay trail not braswell) all had Intel wireless.

The chromebook I purchased has an intel celeron cpu and intel HD graphics. I guess it should have intel wireless. I'd post back after I confirm it when I install linux on it.

rokytnji · 09-29-2016, 12:30 PM

If you get Linux going on it. You might have to settle with using a external usb mouse as the touchpads and kernels used sometimes don't match up real good. But that was last year. Maybe this year they caught up.