{"id":2643,"date":"2018-03-28T08:19:31","date_gmt":"2018-03-28T08:19:31","guid":{"rendered":"http:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/"},"modified":"2018-03-28T09:03:26","modified_gmt":"2018-03-28T09:03:26","slug":"ako-si-maximalne-zabezpecit-laptop","status":"publish","type":"post","link":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/","title":{"rendered":"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop"},"content":{"rendered":"<h4>TO, \u017dE NIE STE PARANOIDN\u00cd, NEZNAMEN\u00c1, \u017dE S\u00da VA\u0160E D\u00c1TA V BEZPE\u010c\u00cd.<\/h4>\n<h4><\/h4>\n<div>S rast\u00facou komplexnos\u0165ou hardv\u00e9ru aj softv\u00e9ru je odha\u013eova\u0165 zranite\u013enosti alebo zadn\u00e9 vr\u00e1tka \u0165a\u017e\u0161ie ako kedyko\u013evek predt\u00fdm. Kritick\u00e9 zranite\u013enosti sa ned\u00e1vno objavili vo v\u0161ade dostupn\u00fdch procesoroch (Meltdown\/Spectre), podobne\u00a0<strong><a href=\"http:\/\/news.softpedia.com\/news\/intel-x86-cpus-come-with-a-secret-backdoor-that-nobody-can-touch-or-disable-505347.shtml\">zadn\u00e9 vr\u00e1tka<\/a>\u00a0<\/strong>(Intel ME).<br \/>\nPrehliada\u010de s mno\u017estvom roz\u0161\u00edren\u00ed za\u010d\u00ednaj\u00fa by\u0165 najzlo\u017eitej\u0161ie internetov\u00e9 aplik\u00e1cie vo va\u0161om po\u010d\u00edta\u010di. Pri s\u00fa\u010dasnej architekt\u00fare a pou\u017eit\u00fdch programovac\u00edch jazykoch je prakticky nemo\u017en\u00e9 eliminova\u0165 ich skryt\u00e9 a neobjaven\u00e9 zranite\u013enosti. Kritick\u00e9 bezpe\u010dnostn\u00e9 zranite\u013enosti sa t\u00fdkaj\u00fa aj najbezpe\u010dnej\u0161\u00edch hardv\u00e9rov\u00fdch pe\u0148a\u017eeniek.<br \/>\n\u0160ifrovanie diskov, antiv\u00edrusov\u00e9 \u010di anti-malware rie\u0161enia pri kompromitovanom hardv\u00e9ri alebo softv\u00e9ri s\u00fa ne\u00fa\u010dinn\u00e9.<br \/>\nV nasleduj\u00facom \u010dl\u00e1nku sa pok\u00fasim vysvetli\u0165 ako v tejto divo\u010dine zranite\u013enost\u00ed pre\u017ei\u0165 a vyu\u017ei\u0165 s\u00fa\u010dasne modern\u00e9 technol\u00f3gie na minimaliz\u00e1ciu ich zneu\u017eitia.<\/div>\n<div><\/div>\n<div><\/div>\n<h2>1 PRE\u010cO LIBREM<\/h2>\n<div><\/div>\n<div>Laptop, ktor\u00fd by bol open-hardv\u00e9r (teda \u013eahko auditovate\u013en\u00fd) a s\u00fa\u010dasne dostato\u010dne v\u00fdkonn\u00fd, v s\u00fa\u010dasnej dobe zrejme neexistuje. Existuj\u00fa r\u00f4zne pokusy o vytvorenie otvoren\u00e9ho laptopu na ARM procesoroch (za zmienku stoj\u00ed\u00a0<a href=\"https:\/\/www.pine64.org\/\">Pine64<\/a>, pr\u00edpadne\u00a0<a href=\"https:\/\/www.crowdsupply.com\/sutajio-kosagi\/novena\">Novena<\/a>), ich v\u00fdkon je ale so s\u00fa\u010dasn\u00fdmi procesormi Intel\/AMD bohu\u017eia\u013e neporovnate\u013en\u00fd. Ak chcete ma\u0165 v dne\u0161nej dobe najv\u00fdkonnej\u0161\u00ed notebook, pou\u017eitiu Intel\/AMD procesoru sa nevyhnete.<br \/>\nNi\u017e\u0161ie uv\u00e1dzam d\u00f4vody, pre\u010do som sa rozhodoval investova\u0165 do notebooku\u00a0<strong><a href=\"https:\/\/puri.sm\/products\/\">Purism Librem<\/a><\/strong>\u00a013, ktor\u00fd nie je len vysoko bezpe\u010dn\u00fd, ale m\u00e1 aj dostato\u010dn\u00fd v\u00fdkon, ktor\u00fd sa od s\u00fa\u010dasn\u00fdch laptopov o\u010dak\u00e1va.<\/div>\n<div><\/div>\n<div>\n<p>Na rozdiel od in\u00fdch be\u017en\u00fdch laptopov, Librem toti\u017e disponuje:<\/p>\n<\/div>\n<div>*\u00a0<strong>hardv\u00e9rov\u00fdm \u201ekill switch-om\u201c<\/strong>, teda fyzick\u00fdm prep\u00edna\u010dom na zapnutie alebo vypnutie mikrof\u00f3nu, kamery, wifi \u010di bluetooth. Nemus\u00edte teda prelepova\u0165 kameru, nako\u013eko jej odpojenie je realizovan\u00e9 na hardv\u00e9rovej \u00farovni.<\/div>\n<div>*<strong>\u00a0v\u00e4\u010d\u0161inou komponentov, ktor\u00e9 s\u00fa open-hardv\u00e9r<\/strong>\u00a0\u2013 spolo\u010dnos\u0165 Purism \u0161peci\u00e1lne rie\u0161i ich bezpe\u010dnos\u0165 priamo s ich v\u00fdrobcami<br \/>\n*<strong>\u00a0\u0161pehovacou Intel ME funkcionalitou, ktor\u00e1 ide \u010diasto\u010dne alebo \u00faplne vypn\u00fa\u0165<\/strong>\u00a0(tzv. \u201eneutralizova\u0165\u201c) (v Purism sa tejto\u00a0<a href=\"https:\/\/puri.sm\/learn\/intel-me\/\">problematike dos\u0165 venuj\u00fa<\/a>)<br \/>\n* namiesto propriet\u00e1rneho BIOSu open source\u00a0<a href=\"https:\/\/www.coreboot.org\/\">Coreboot<\/a>-om<br \/>\n*\u00a0<strong>TPM \u010dipom<\/strong>, ktor\u00fd podporuje (pri nasleduj\u00facom Librem modeli) opensource\u00a0<a href=\"https:\/\/trmm.net\/Heads\">Heads<\/a>\u00a0(viac inform\u00e1cii tie\u017e\u00a0<a href=\"https:\/\/puri.sm\/posts\/making-heads-more-usable-with-menus\/\">Tamper-evident Boot Update: Making Heads More Usable<\/a>)<\/div>\n<div><\/div>\n<h2>2 PRE\u010cO QUBES<\/h2>\n<div>Librem sa ofici\u00e1lne dod\u00e1va s opera\u010dn\u00fdm\u00a0<a href=\"https:\/\/pureos.net\/\"><strong>PureOS<\/strong><\/a>, \u010do je mierne zabezpe\u010dn\u00e1 verzia Debianu (s integrovan\u00fdm Tor-om, nat\u00edvnym prehliada\u010dom PureBrowser podporuj\u00facim EFF Privacy Badger, HTTPS Everywhere \u010di DuckDuckGo plugin). P\u00ed\u0161em \u201emierne\u201c, lebo inak som si tam nev\u0161imol \u017eiadne v\u00fdrazn\u00e9 nav\u00fd\u0161enie bezpe\u010dnosti oproti dobre skonfigurovan\u00fdm desktopom na Debian\/Ubuntu\/Mint.<br \/>\nVzh\u013eadom k tomu, \u017ee pred p\u00e1r t\u00fd\u017ed\u0148ami vy\u0161la\u00a0<a href=\"https:\/\/puri.sm\/posts\/february-2018-coreboot-update\/\"><strong>pre Librem nov\u00e1 verzia Coreboot 4.7<\/strong><\/a>, ktor\u00e1 podporuje IOMMU (umo\u017e\u0148uj\u00fac fyzick\u00fa segreg\u00e1ciu pam\u00e4te medzi virtu\u00e1lnymi ma\u0161inami (\u010falej len VM) chr\u00e1niac ich vo\u010di \u00fatokom na \u00farovni DMA) ako aj podporu TPM (ktor\u00fd posledn\u00fd Librem u\u017e obsahuje), rozhodol som sa nev\u00e1ha\u0165 a rozbehol som si posledn\u00fa verziu (4.0rc5) vysoko bezpe\u010dn\u00e9ho\u00a0<strong><a href=\"https:\/\/www.qubes-os.org\/\">Qubes OS<\/a><\/strong>.<br \/>\nQubes OS sa rozhodol pre bezpe\u010dnostn\u00fd model \u201e<strong>security by compartmentalization<\/strong>\u201c, \u010do v tomto pr\u00edpade znamen\u00e1 \u201eroz\u0161katu\u013ekovanie\u201c cel\u00e9ho syst\u00e9mu na mno\u017estvo segregovan\u00fdch VM, kde v ka\u017edej dok\u00e1\u017ee be\u017ea\u0165 samostatn\u00e1 aplik\u00e1cia.<br \/>\nV\u0161etk\u00fdch t\u00fdch, ktor\u00ed si myslia, \u017ee to cel\u00e9 kv\u00f4li chyb\u00e1m v Inteli (Meltdown &amp; Spectre) nebude fungova\u0165, by som r\u00e1d ubezpe\u010dil, \u017ee uveden\u00e9 zranite\u013enosti s\u00fa v\u010faka bezpe\u010dnostnej aktualiz\u00e1cii\u00a0<a href=\"https:\/\/www.qubes-os.org\/news\/2018\/01\/11\/qsb-37\/\">v poslednom Qubes<\/a>\u00a0u\u017e opraven\u00e9.<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>2.1 Typy VM<br \/>\nV Qubes 4 s\u00fa predin\u0161talovan\u00e9 tri s\u00faborov\u00e9 syst\u00e9my \u2013 Fedora 26, Debian 9 a Whonix 13. Z nich je mo\u017en\u00e9 n\u00e1sledne vytv\u00e1ra\u0165 aplika\u010dn\u00e9 VM.<br \/>\nAplika\u010dn\u00e9 VM s\u00fa ve\u013emi efekt\u00edvne, \u010do sa t\u00fdka \u00falo\u017en\u00e9ho priestoru. Pri vytvoren\u00ed tohto VM sa zrecykluje kompletne cel\u00fd s\u00faborov\u00fd syst\u00e9m dan\u00e9ho OS. Do \u00falo\u017eiska tak\u00e9hoto VM sa ukladaj\u00fa len pou\u017e\u00edvate\u013esk\u00e9 d\u00e1ta (crontaby, lok\u00e1lne firewall pravidl\u00e1, rc.local, domovsk\u00e9 adres\u00e1re \/home, a cel\u00fd \/usr\/local). Ka\u017ed\u00e1 aplik\u00e1cia v samostatnom aplika\u010dnom VM je preto dobr\u00fd n\u00e1pad a nemus\u00edte sa ob\u00e1va\u0165 r\u00fdchlo zaplnen\u00e9ho disku.<br \/>\n\u010eal\u0161ia ve\u013ek\u00e1 v\u00fdhoda aplika\u010dn\u00fdch VM je jednoduch\u00e1 aktualiz\u00e1cia \u2013 sta\u010d\u00ed aktualizova\u0165 jeden centr\u00e1lny s\u00faborov\u00fd syst\u00e9m a po re\u0161tarte m\u00e1te aktualizovan\u00e9 v\u0161etky VM, ktor\u00e9 s\u00fa z neho derivovan\u00e9.<br \/>\nToto ale neplat\u00ed, ak pri vytv\u00e1ran\u00ed VM zvol\u00edte mo\u017enos\u0165 \u201cStandalone Qube\u201d \u2013 v tomto pr\u00edpade sa v\u00e1m do nov\u00e9ho VM kompletne skop\u00edruje existuj\u00faci s\u00faborov\u00fd syst\u00e9m (Fedora, Debian, Whonix). Pr\u00edpadne m\u00f4\u017eete definova\u0165 vlastn\u00fd. Osobne som t\u00fato mo\u017enos\u0165 zatia\u013e nikdy nepotreboval, ke\u010f\u017ee s Debianom sa kamar\u00e1tim a dok\u00e1zal som si tam zatia\u013e rozbehn\u00fa\u0165 \u00faplne v\u0161etko.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>2.2 Typy virtualiz\u00e1cie<br \/>\nVirtualiz\u00e1cia v Qubes je implementovan\u00e1 cez XEN, ktor\u00fd podporuje 3 typy virtualiz\u00e1cie:<\/p>\n<\/div>\n<div>1.\u00a0<strong>PVH<\/strong>\u00a0(\u201cdefault\u201d) pre v\u0161etky Linuxov\u00e9 VM. Ide o hardv\u00e9rovo podporovan\u00fa paravirtualiz\u00e1ciu, ktor\u00e1 je ve\u013emi r\u00fdchla a optim\u00e1lna na v\u00e4\u010d\u0161inu pou\u017eit\u00ed (pre ka\u017ed\u00fa VM je mo\u017en\u00e9 \u0161pecifikova\u0165 samostatn\u00e9 jadro)<br \/>\n2.\u00a0<strong>PV<\/strong>\u00a0\u2013 paravirtualiz\u00e1cia bez hardv\u00e9rovej podpory<br \/>\n3.\u00a0<strong>HVM<\/strong>\u00a0\u2013 pln\u00e1 hardv\u00e9rov\u00e1 virtualiz\u00e1cia, pomal\u0161ia ako PVH, nevyhnutn\u00e1 pri pou\u017eit\u00ed Windows OS vo VM.<\/div>\n<div><\/div>\n<div><\/div>\n<div>Porovnanie (origin\u00e1l https:\/\/wiki.xen.org\/wiki\/File:XenModes.png )<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>2.3 Segreg\u00e1cia virtualiz\u00e1ciou ako cesta k vy\u0161\u0161ej bezpe\u010dnosti<br \/>\nQubes podporuje viacero syst\u00e9mov\u00fdch \u0161abl\u00f3n (\u201etemplates\u201c) ktor\u00e9 je mo\u017en\u00e9 previaza\u0165 s va\u0161imi VM a zabezpe\u010di\u0165 im individu\u00e1lny pr\u00edstup na Internet \u010di k USB zariadeniam. Tieto \u0161abl\u00f3ny predstavuj\u00fa samostatn\u00e9 VM, ktor\u00e9 s\u00fa vytvoren\u00e9 zo s\u00faborov\u00fdch \u0161abl\u00f3n (Debian 9, Fedora 26, Whonix 13). Sp\u00fa\u0161\u0165aj\u00fa sa hne\u010f po na\u0161tartovan\u00ed Qubes a sl\u00fa\u017eia ako VM, kde je smerovan\u00e1 sie\u0165ov\u00e1 prev\u00e1dzka ostatn\u00fdch VM.<br \/>\n<strong>V Qubes s\u00fa predin\u0161talovan\u00e9 nasleduj\u00face syst\u00e9mov\u00e9 \u0161abl\u00f3ny:<\/strong><br \/>\n* <strong>sys-whonix<\/strong> \u2013 transparentn\u00e9 kompletn\u00e9 smerovanie sie\u0165ovej prev\u00e1dzky do Tor anonymiza\u010dne siete (ako s\u00faborov\u00e1 \u0161abl\u00f3na je pou\u017eit\u00fd Whonix)<br \/>\n* <strong>sys-firewall<\/strong> \u2013 \u0161tandardn\u00fd firewall (INPUT, FORWARD chain nastaven\u00fd na DROP) (ako \u0161abl\u00f3na je pou\u017eit\u00e1 sys-net)<br \/>\n* <strong>sys-net<\/strong> \u2013 pr\u00edstup na Internet (ako s\u00faborov\u00e1 \u0161abl\u00f3na je pou\u017eit\u00e1 Fedora)<br \/>\n* <strong>sys-usb<\/strong> \u2013 pr\u00edstup na USB (ako s\u00faborov\u00e1 \u0161abl\u00f3na je pou\u017eit\u00e1 Fedora)<\/p>\n<\/div>\n<div><\/div>\n<div>Jedn\u00fdm kliknut\u00edm dok\u00e1\u017eete nastavi\u0165 alebo zmeni\u0165, aby va\u0161a vytvoren\u00e1 VM mala pr\u00edstup na Internet, do anonymnej Tor siete alebo k USB zariadeniam, pr\u00edpadne ni\u010d z toho. Pre ka\u017ed\u00fa virtu\u00e1lnu ma\u0161inu je mo\u017en\u00e9 skonfigurova\u0165 aj lok\u00e1lny sie\u0165ov\u00fd firewall (pripojenie na ktor\u00e9 porty je dovolen\u00e9 z danej VM, zvy\u0161ok je zak\u00e1zan\u00fd).<\/div>\n<div><\/div>\n<div>Pre in\u0161pir\u00e1ciu uv\u00e1dzam nastavenie p\u00e1r mojich osobn\u00fdch VM:<\/div>\n<div><\/div>\n<div>* <strong>fedora-26-dvm<\/strong> (pr\u00edstup na Internet cez firewall) \u2013 jednor\u00e1zov\u00e1 in\u0161tancia VM, ktor\u00e1 spust\u00ed \u201eprehliadanie\u201c bez ak\u00fdchko\u013evek st\u00f4p<br \/>\n* <strong>whonix-dvm<\/strong> (pr\u00edstup na Internet cez Tor) \u2013 jednor\u00e1zov\u00e1 in\u0161tancia VM, ktor\u00e1 spust\u00ed \u201eprehliadanie\u201c cez Tor bez ak\u00fdchko\u013evek st\u00f4p<br \/>\n*<strong> TrustedCommunication<\/strong> (pr\u00edstup na Internet cez firewall) \u2013 VM, kde m\u00e1m umiestnen\u00e9 moje priv\u00e1tne SSH a Signal k\u013e\u00fa\u010de (be\u017e\u00ed mi tam Signal a SSH klient)<br \/>\n* <strong>Trezor<\/strong> (bez ak\u00e9hoko\u013evek pr\u00edstupu na sie\u0165) \u2013 be\u017e\u00ed mi tam password manager (B-Folders + KeePassX)<br \/>\n* <strong>personal<\/strong> (pr\u00edstup na Internet cez firewall) \u2013 be\u017e\u00ed mi tam Spotify, Emacs, LibreOffice\u2026<br \/>\n* <strong>monero-wallet-ws<\/strong> (bez ak\u00e9hoko\u013evek pr\u00edstupu na sie\u0165) \u2013 VM, kde m\u00e1m ulo\u017een\u00e9 priv\u00e1tne k\u013e\u00fa\u010de k Monero pe\u0148a\u017eenke<br \/>\n* <strong>monerod-ws<\/strong> (pr\u00edstup na Internet iba cez Tor) \u2013 synchronizovan\u00fd Monero blockchain cez Tor, podobne v\u0161etky Monero transakcie s\u00fa broadcastovan\u00e9 cez Tor<\/div>\n<div><\/div>\n<div>Ako ste si v\u0161imli, pr\u00edstup k USB je u v\u0161etk\u00fdch VM plo\u0161ne zak\u00e1zan\u00fd a mus\u00edm ho explicitne pre dan\u00fa VM povoli\u0165, ke\u010f potrebujem (napr\u00edklad, ke\u010f chcem robi\u0165 backup na USB alebo importn\u00fa\u0165 Monero blockchain).<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>2.4 Paranoidn\u00e9 nastavenie Monero desktop pe\u0148a\u017eenky<br \/>\nKombin\u00e1ciu Librem + Qubes \u0161peci\u00e1lne ocenia v\u0161etci t\u00ed, ktor\u00ed chc\u00fa v maxim\u00e1lnej mo\u017enej miere zabezpe\u010di\u0165 svoje desktop pe\u0148a\u017eenky (v pr\u00edpade Monera, pre ktor\u00fd st\u00e1le neexistuj\u00fa HW pe\u0148a\u017eenky, je to p\u00e1l\u010div\u00fd probl\u00e9m).<br \/>\nZrejme najlep\u0161\u00ed sp\u00f4sob ako toto docieli\u0165 v pr\u00edpade <a href=\"https:\/\/github.com\/0xB44EFD8751077F97\/monero-site\/blob\/eea61b3204addcecdcff210c0e3f08e7a2662030\/resources\/user-guides\/wallet-daemon-isolation-qubes-whonix.md\">Qubes a Monera<\/a><strong>\u00a0<a href=\"https:\/\/github.com\/0xB44EFD8751077F97\/monero-site\/blob\/eea61b3204addcecdcff210c0e3f08e7a2662030\/resources\/user-guides\/wallet-daemon-isolation-qubes-whonix.md\">je pop\u00edsan\u00fd tu<\/a><\/strong>.<br \/>\nV skratke \u2013 priv\u00e1tne k\u013e\u00fa\u010de Monera s\u00fa v zabezpe\u010denej VM, ktor\u00e1 je kompletne odpojen\u00e1 od Internetu (nie je tam spusten\u00fd ani wifi\/ethernet interface!). Jedin\u00fd povolen\u00fd port (ktor\u00fd mus\u00ed by\u0165 explicitne schv\u00e1len\u00fd z dom0) je monerod port 18081, ktor\u00fd je presmerovan\u00fd na localhost:18081. Cez ten monero wallet komunikuje s monerod, ktor\u00fd be\u017e\u00ed na samostatnej VM. T\u00e1 m\u00e1 pr\u00edstup do Internetu iba cez Tor (sys-whonix), cez ktor\u00fd sa aktualizuje blockchain a vykon\u00e1vaj\u00fa v\u0161etky Monero transakcie.<br \/>\nPodobn\u00fdm sp\u00f4sobom je mo\u017en\u00e9 skonfigurova\u0165 (teda segregova\u0165 do samostatnej VM) desktop pena\u017eenky ak\u00fdchko\u013evek in\u00fdch kryptomien, pre ktor\u00e9 e\u0161te neexistuje hardv\u00e9rov\u00e1 pe\u0148a\u017eenka.<\/p>\n<\/div>\n<div><\/div>\n<h2>3 PROBL\u00c9MY, KTOR\u00c9 V\u00c1S \u010cAKAJ\u00da VR\u00c1TANE RIE\u0160EN\u00cd<\/h2>\n<p>&nbsp;<\/p>\n<p>3.1 Slovensk\u00e1 colnica<br \/>\nNajv\u00e4\u010d\u0161\u00ed probl\u00e9m zo v\u0161etk\u00fdch ni\u017e\u0161ie uveden\u00fdch bola samozrejme Slovensk\u00e1 colnica. Purism Librem je nutn\u00e9 objedna\u0165 z USA. A napriek tomu, \u017ee doru\u010denie trv\u00e1 len p\u00e1r dn\u00ed, na colnici obvykle tovar tr\u010d\u00ed nieko\u013eko t\u00fd\u017ed\u0148ov.<br \/>\nAk m\u00f4\u017eete, tak si dan\u00fd laptop k\u00fapte v USA, a \u00faplne sa vyhnite coln\u00e9mu konaniu. Vyhnete sa aj jeho \u201epotenci\u00e1lnemu\u201c zabackdoorovaniu zo strany \u0161t\u00e1tnych \u00faradov.<br \/>\nAk sa rozhodnete si ho objedna\u0165 z USA, tak mno\u017estvo byrokracie dok\u00e1\u017eete zn\u00ed\u017ei\u0165, ke\u010f si laptop nech\u00e1te doru\u010di\u0165 na seba ako fyzick\u00fa osobu. Je mo\u017en\u00e9 sa \u00faplne vyhn\u00fa\u0165 konfront\u00e1cii so \u0161t\u00e1tnymi \u00faradn\u00edkmi, s ktor\u00fdmi mo\u017eno podobne ako ja nezdie\u013eate spolo\u010dn\u00fd komunika\u010dn\u00fd protokol. Sta\u010d\u00ed, ke\u010f na emailov\u00fa adresu <a href=\"mailto:cloba@slposta.sk\">cloba@slposta.sk<\/a> za\u0161lete va\u0161e nascanovan\u00e9 po\u0161tov\u00e9 ozn\u00e1menie s podac\u00edm a skladov\u00fdm \u010d\u00edslom a prilo\u017e\u00edte pr\u00edslu\u0161n\u00fa fakt\u00faru od Purism ako aj potvrdenie o platbe (Purism ide zaplati\u0165 aj Monerom \u2013 ke\u010f sa tak rozhodnete spravi\u0165, tak dajte vedie\u0165, \u010do na to slovensk\u00ed coln\u00edci :)) S\u00fa\u010dasne v mailovej komunik\u00e1cii Coln\u00fa spr\u00e1vu vyzvite na samotn\u00e9 coln\u00e9 preclenie v\u00e1\u0161ho tovaru a vyr\u00fabenie 20% DPH a po\u017eiadajte ich, aby v\u00e1m samotn\u00fd tovar poslali na va\u0161u adresu dobierkou. Dva probl\u00e9my s ktor\u00fdmi by ste ale mali v tomto pr\u00edpade po\u010d\u00edta\u0165 \u2013 neviete si odpo\u010d\u00edta\u0165 DPH (ak objedn\u00e1vate na firmu, tak je to mo\u017en\u00e9) a riskujete, \u017ee v\u00e1m to Slovensk\u00e1 po\u0161ta cestou z colnice rozbije.<br \/>\nDruh\u00e1 podstatne byrokratickej\u0161ia mo\u017enos\u0165 je objedna\u0165 si laptop z USA na firmu. V tomto pr\u00edpade si m\u00f4\u017eete odpo\u010d\u00edta\u0165 na konci mesiaca DPH. Cel\u00fd tento proces je ultra byrokratick\u00fd, tak\u017ee sa na to asi rovno vyka\u0161lite a za 30-35 EUR si objednajte \u201e\u0161t\u00e1tom spriaznen\u00fa\u201c firmu, ktor\u00e1 cel\u00fa byrokraciu s t\u00fdm spojen\u00fa vybav\u00ed za v\u00e1s.<\/p>\n<p>&nbsp;<\/p>\n<p>3.2 Upgrade Corebootu na posledn\u00fa verziu<br \/>\nAby sa v\u00e1m Qubes4 na Librem v\u00f4bec nain\u0161taloval, tak potrebujete realizova\u0165 upgrade v\u00e1\u0161ho Corebootu na posledn\u00fa verziu (4.7). Tento proces <a href=\"https:\/\/puri.sm\/posts\/february-2018-coreboot-update\/\">je tu d\u00f4kladne pop\u00edsan\u00fd<\/a>.<\/p>\n<div>\n<p>&nbsp;<\/p>\n<p>3.3 Nefunk\u010dn\u00fd kl\u00e1ves \\ (resp |)<br \/>\nPo nain\u0161talovan\u00ed Qubes na Librem v\u00e1m nebude fungova\u0165 kl\u00e1ves \\ (resp |). Toto oprav\u00edte ve\u013emi r\u00fdchlo, sta\u010d\u00ed v dom0 vytvori\u0165 s\u00fabor <em>\/etc\/udev\/hwdb.d\/90-purism-pipe-symbol-fi.hwdb <\/em>s obsahom:<br \/>\nevdev:atkbd:dmi:bvn*:bvr*:bd*:svnPurism:pnLibrem13v2*<br \/>\nKEYBOARD_KEY_56=backslash<\/p>\n<\/div>\n<div>A n\u00e1sledne spusti\u0165 pr\u00edkazy:<br \/>\n<em>sudo systemd-hwdb update<\/em><br \/>\n<em>sudo udevadm trigger<\/em><\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>3.4 Pridanie ikonky aplik\u00e1cie na hornej li\u0161te<br \/>\nDosta\u0165 na horn\u00fa li\u0161tu Window managera ikonku va\u0161ej ob\u013e\u00fabenej aplik\u00e1cie, tak aby i\u0161la kedyko\u013evek spusti\u0165 v danom VM nie je \u00faplne jednoduch\u00e9. Sprav\u00edte to ale takto:<\/p>\n<\/div>\n<div>1. Na\u0161tartujte VM so s\u00faborov\u00fdm syst\u00e9mom, ktor\u00fd pou\u017e\u00edvate (Debian 9 alebo Fedora 26).<br \/>\n2. Nain\u0161talujte va\u0161u aplik\u00e1ciu, ktor\u00fa chcete sp\u00fa\u0161\u0165a\u0165.<br \/>\n3. Prihl\u00e1ste sa ako root a do \/usr\/share\/applications\/ nakop\u00edrujte popis pr\u00edslu\u0161nej aplik\u00e1cie, ktor\u00fa ste nain\u0161talovali v kroku 2, napr\u00edklad signal-desktop.desktop:<\/div>\n<div><\/div>\n<div>[Desktop Entry]<\/div>\n<div>Name=Signal<br \/>\nComment=Private messaging from your desktop<br \/>\nExec=\u201d\/opt\/Signal\/signal-desktop\u201d %U<br \/>\nTerminal=false<br \/>\nType=Application<br \/>\nIcon=signal-desktop<br \/>\nStartupWMClass=Signal<br \/>\nCategories=Network;<\/div>\n<div><\/div>\n<div>4. Vypnite dan\u00fd VM.<br \/>\n5. Otvorte konfigur\u00e1ciu aplika\u010dn\u00e9ho VM, ktor\u00fd m\u00e1te z neho derivovan\u00fd. V nastaveniach dan\u00e9ho VM zobrazte zoznam aplik\u00e1ci\u00ed, ktor\u00e9 tam m\u00e1te nain\u0161talovan\u00e9 a stla\u010dte \u201eRefresh applications\u201c \u2013 zobraz\u00ed sa v\u00e1m va\u0161a aplik\u00e1cia.<br \/>\n6. Kliknite na horn\u00fa li\u0161tu a zvo\u013ete vo\u013ebu \u201ePanel\u201c \/ \u201eAdd New Items\u201c \/ \u201eLauncher\u201c<br \/>\n7. Kliknite na \u201eProperties\u201c novej aplik\u00e1cie a vyberte va\u0161u zvolen\u00fa aplik\u00e1ciu.<br \/>\n8. Ke\u010f chcete k nej nakop\u00edrova\u0165 vlastn\u00fa ikonku do dom0, tak to sprav\u00edte takto.<\/div>\n<div><\/div>\n<h2>4 NEV\u00ddHODY<\/h2>\n<div>V\u00e4\u010d\u0161ina uveden\u00fdch nev\u00fdhod je da\u0148 za v\u00fdrazne zv\u00fd\u0161en\u00fa bezpe\u010dnos\u0165, ktor\u00e1 je v\u00fdkonovo a energeticky n\u00e1ro\u010dn\u00e1.<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>4.1 Slab\u0161ia v\u00fddr\u017e baterky<br \/>\nPod\u013ea v\u00fdrobcu ofici\u00e1lna v\u00fddr\u017e baterky Librem 13 je 7 a\u017e 9 hod\u00edn. Ak sa rozhodnete \u00eds\u0165 do Qubes a v\u0161etko prev\u00e1dzkova\u0165 vo VM, \u010do je n\u00e1ro\u010dne na CPU, po\u010d\u00edtajte s t\u00fdm, \u017ee v\u00fddr\u017e bude mo\u017eno 3x ni\u017e\u0161ia.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>4.2 Neo\u010dak\u00e1van\u00e9 vypnutie laptopu e\u0161te pred jeho vybit\u00edm<br \/>\nAsi 2x sa mi stalo, \u017ee sa mi Librem neo\u010dak\u00e1vane vypol, aj napriek tomu, \u017ee jeho bat\u00e9ria nebola \u00faplne vybit\u00e1. I\u0161lo o situ\u00e1cie, kedy bol extr\u00e9mne pre\u0165a\u017een\u00fd (ve\u013ea spusten\u00fdch VM, napr\u00edklad mi be\u017eal backup) a s\u00fa\u010dasne nebol v elektrickom nap\u00e1jan\u00ed. Vypnutie bolo okam\u017eit\u00e9, bez akejko\u013evek notifik\u00e1cie, \u017ee bat\u00e9ria je u\u017e takmer vybit\u00e1. Neviem vyl\u00fa\u010di\u0165 \u010di nejde len o nejak\u00fa hardv\u00e9rov\u00fa chybu m\u00f4jho konkr\u00e9tneho modelu. Ke\u010f bol laptop zapojen\u00fd v elektrickej sieti, tak sa mi to nikdy nestalo.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>4.3 Pomal\u0161ie \u0161tartovanie aplik\u00e1ci\u00ed a bootovanie<br \/>\nKa\u017ed\u00e9 spustenie aplik\u00e1cie znamen\u00e1, \u017ee sa v\u00e1m mus\u00ed spusti\u0165 samostatn\u00e1 VM, ktor\u00e1 mus\u00ed nabootova\u0165 a n\u00e1sledne sa v nej mus\u00ed spusti\u0165 po\u017eadovan\u00e1 aplik\u00e1cia. \u010co m\u00f4\u017ee trva\u0165 r\u00e1dovo o p\u00e1r sek\u00fand viac ako ste norm\u00e1lne zvyknut\u00ed. D\u00e1 sa to vyrie\u0161i\u0165 tak, \u017ee VM pou\u017e\u00edvan\u00fdch aplik\u00e1ci\u00ed spust\u00edte rovno pri \u0161tarte (je to jednoduch\u00e9 nastavi\u0165). V tomto pr\u00edpade sa ale o to pred\u013a\u017ei samotn\u00e9 bootovanie.<br \/>\nBeh samotn\u00fdch aplik\u00e1ci\u00ed je ale r\u00fdchly, tak\u017ee sa d\u00e1 na na to zvykn\u00fa\u0165 a mne osobne toto u\u017e nevad\u00ed.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>4.4 Mierne zn\u00ed\u017een\u00e1 usability<br \/>\nKv\u00f4li tomu, \u017ee ka\u017ed\u00e1 aplik\u00e1cia m\u00f4\u017ee v Qubes be\u017ea\u0165 v samostatnej VM, ktor\u00e9 s\u00fa navz\u00e1jom oddelen\u00e9, ist\u00fd usability probl\u00e9m m\u00f4\u017ee predstavova\u0165 komunik\u00e1cia medzi spusten\u00fdmi aplik\u00e1ciami v r\u00f4znych VM. Napr\u00edklad, ke\u010f chcete skop\u00edrova\u0165 jednoduch\u00fd text, tak to mus\u00edte spravi\u0165 v nasleduj\u00facich krokoch:<\/p>\n<\/div>\n<div>1. Skop\u00edrovanie textu do clipboardu v danej VM (obvykle Ctrl + C)<br \/>\n2. Skop\u00edrovanie do Qubes clipboardu v dom0 (Shift + Ctrl + C)<br \/>\n3. Vlo\u017eenie do Qubes clipboardu v danej VM (Shift + Ctrl + V)<br \/>\n4. Vlo\u017eenie textu v danej VM (Ctrl + V)<\/div>\n<div><\/div>\n<div>Tak\u017ee 2 kroky navy\u0161e ako norm\u00e1lne, ale d\u00e1 sa na to r\u00fdchlo zvykn\u00fa\u0165.<br \/>\nAk kop\u00edrujete text medzi oknami aplik\u00e1ci\u00ed, ktor\u00e9 be\u017eia v tej istej VM, tak samozrejme tento probl\u00e9m nem\u00e1te.<br \/>\nPodobne kop\u00edrovanie s\u00faborov medzi VM sa realizuje trochu \u0161peci\u00e1lne \u2013 pomocou pr\u00edkazov qvm-copy alebo qvm-move vy\u017eaduj\u00fac explicitn\u00fd s\u00fahlas, ktor\u00fd sa v\u00e1m zobraz\u00ed v dom0. Na toto sa d\u00e1 tie\u017e ve\u013emi r\u00fdchlo zvykn\u00fa\u0165.<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>4.5 Absentuj\u00faca podpora Windows 10<br \/>\nWindows 10 na Qubes 4 zatia\u013e nebe\u017e\u00ed (nevyzer\u00e1, \u017ee by toto bola nejak\u00e1 priorita v\u00fdvoj\u00e1rov). Experiment\u00e1lne to ide <a href=\"https:\/\/groups.google.com\/forum\/#!topic\/qubes-users\/dB_OU87dJWA\">vyhackova\u0165 takto<\/a>.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>4.6 Touchpad namiesto trackpoint<br \/>\nToto je zrejme \u010disto m\u00f4j subjekt\u00edvny pocit ako odchovanca na IBM ThinkPad. Som zvyknut\u00fd na trackpoint namiesto touchpadu, ktor\u00fd mi pr\u00edde v\u00fdrazne pou\u017eite\u013enej\u0161\u00ed. Bohu\u017eia\u013e Librem disponuje len touchpadom (samozrejme je mo\u017en\u00e9 pripoji\u0165 extern\u00fa USB my\u0161).<\/p>\n<\/div>\n<h2>5 V\u00ddHODY<\/h2>\n<div>Okrem obrovsk\u00fdch bezpe\u010dnostn\u00fdch v\u00fdhod, ktor\u00e9 Qubes pon\u00faka, r\u00e1d by som pouk\u00e1zal na p\u00e1r \u010fal\u0161\u00edch v\u00fdhod, ktor\u00e9 s bezpe\u010dnos\u0165ou priamo nes\u00favisia.<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>5.1 \u0160etrenie diskov\u00e9ho priestoru<br \/>\nPri pou\u017eit\u00ed aplika\u010dn\u00fdch VM dok\u00e1\u017eete skuto\u010dne u\u0161etri\u0165 ve\u013ea diskov\u00e9ho priestoru. Kompletne virtualizovan\u00e9 prostredie berie len o trochu viac diskov\u00e9ho priestoru ako nevirtualizovan\u00e9.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>5.2 Jednoduch\u00e9 zv\u00e4\u010d\u0161ovanie diskov\u00e9ho priestoru VM<br \/>\nZv\u00e4\u010d\u0161ovanie syst\u00e9mov\u00e9ho diskov\u00e9ho priestoru (root) alebo s\u00fakromn\u00e9ho s\u00faborov\u00e9ho syst\u00e9mu (private) v akomko\u013evek VM je v\u010faka LVM <a href=\"https:\/\/www.qubes-os.org\/doc\/resize-disk-image\/\">extr\u00e9mne jednoduch\u00e9<\/a>. A dok\u00e1\u017eete to spravi\u0165 pre pr\u00e1ve spusten\u00fa VM, ktor\u00fa nemus\u00edte dokonca u\u017e ani re\u0161tartova\u0165.<\/p>\n<\/div>\n<div><\/div>\n<div>\n<p>&nbsp;<\/p>\n<p>5.3 Jednoduch\u00e9 z\u00e1lohovanie<br \/>\nZ\u00e1lohovanie VM je tie\u017e ve\u013emi jednoduch\u00e9 \u2013 sta\u010d\u00ed vyklika\u0165, ktor\u00e9 VM chcete z\u00e1lohova\u0165, \u010di ich chcete pri z\u00e1lohovan\u00ed komprimova\u0165 a \u0161ifrova\u0165 a vybra\u0165 si cestu a VM, kam to chcete cel\u00e9 ulo\u017ei\u0165. Ja som si \u0161peci\u00e1lne pre z\u00e1lohovanie m\u00f4jho laptopu k\u00fapil 512 GB USB k\u013e\u00fa\u010d.<\/p>\n<\/div>\n<div><\/div>\n<h2>Z\u00c1VER<\/h2>\n<div><\/div>\n<div>Vysoko bezpe\u010dn\u00e1 kombin\u00e1cia Purism Librem a Qubes zrejme nebude pre ka\u017ed\u00e9ho.<br \/>\nAk ste exponovan\u00e1 osoba, ktor\u00e1 sa ob\u00e1va hrozby cielen\u00fdch \u00fatokov (napr\u00edklad vyu\u017eit\u00edm 0-day exploitov), pr\u00edpadne potrebujete chr\u00e1ni\u0165 kryptomeny, v ktor\u00fdch m\u00e1te preva\u017en\u00fa \u010das\u0165 va\u0161ich celo\u017eivotn\u00fdch \u00faspor, tak Librem+Qubes je \u201cmust\u201d a zrejme ni\u010d lep\u0161ie nen\u00e1jdete.<\/div>\n<div><strong>Qubes okrem in\u00fdch pou\u017e\u00edva Snowden, DJ Bernstein, Peter Todd a mno\u017estvo in\u00fdch \u013eud\u00ed pre ktor\u00fdch je bezpe\u010dnos\u0165 skuto\u010dne k\u013e\u00fa\u010dov\u00e1.<\/strong><br \/>\n(Cel\u00fd tento \u010dl\u00e1nok bol nap\u00edsan\u00fd v Qubes 4 na Purism Librem).<\/div>\n","protected":false},"excerpt":{"rendered":"<p>TO, \u017dE NIE STE PARANOIDN\u00cd, NEZNAMEN\u00c1, \u017dE S\u00da VA\u0160E D\u00c1TA V BEZPE\u010c\u00cd. S rast\u00facou komplexnos\u0165ou hardv\u00e9ru aj softv\u00e9ru je odha\u013eova\u0165 zranite\u013enosti alebo zadn\u00e9 vr\u00e1tka \u0165a\u017e\u0161ie ako kedyko\u013evek predt\u00fdm. Kritick\u00e9 zranite\u013enosti sa ned\u00e1vno objavili vo v\u0161ade dostupn\u00fdch procesoroch (Meltdown\/Spectre), podobne\u00a0zadn\u00e9 vr\u00e1tka\u00a0(Intel ME). Prehliada\u010de s mno\u017estvom roz\u0161\u00edren\u00ed za\u010d\u00ednaj\u00fa by\u0165 najzlo\u017eitej\u0161ie internetov\u00e9 aplik\u00e1cie vo va\u0161om po\u010d\u00edta\u010di. Pri s\u00fa\u010dasnej [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":2610,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[],"tags":[69],"class_list":["post-2643","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","tag-it-bezpecnost"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop - Nethemba<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop - Nethemba\" \/>\n<meta property=\"og:description\" content=\"TO, \u017dE NIE STE PARANOIDN\u00cd, NEZNAMEN\u00c1, \u017dE S\u00da VA\u0160E D\u00c1TA V BEZPE\u010c\u00cd. S rast\u00facou komplexnos\u0165ou hardv\u00e9ru aj softv\u00e9ru je odha\u013eova\u0165 zranite\u013enosti alebo zadn\u00e9 vr\u00e1tka \u0165a\u017e\u0161ie ako kedyko\u013evek predt\u00fdm. Kritick\u00e9 zranite\u013enosti sa ned\u00e1vno objavili vo v\u0161ade dostupn\u00fdch procesoroch (Meltdown\/Spectre), podobne\u00a0zadn\u00e9 vr\u00e1tka\u00a0(Intel ME). Prehliada\u010de s mno\u017estvom roz\u0161\u00edren\u00ed za\u010d\u00ednaj\u00fa by\u0165 najzlo\u017eitej\u0161ie internetov\u00e9 aplik\u00e1cie vo va\u0161om po\u010d\u00edta\u010di. Pri s\u00fa\u010dasnej [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/\" \/>\n<meta property=\"og:site_name\" content=\"Nethemba\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/nethemba\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-28T08:19:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-03-28T09:03:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nethemba.com\/wp-content\/uploads\/2018\/01\/2018_Nethemba_IT-bezpecnostny-expert.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1142\" \/>\n\t<meta property=\"og:image:height\" content=\"857\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Pavol Lupt\u00e1k\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nethemba\" \/>\n<meta name=\"twitter:site\" content=\"@nethemba\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pavol Lupt\u00e1k\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"15\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/\"},\"author\":{\"name\":\"Pavol Lupt\u00e1k\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#\\\/schema\\\/person\\\/5f4ba68c8e1a2013d30e0804245b8234\"},\"headline\":\"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop\",\"datePublished\":\"2018-03-28T08:19:31+00:00\",\"dateModified\":\"2018-03-28T09:03:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/\"},\"wordCount\":3058,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nethemba.com\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/2018_Nethemba_IT-bezpecnostny-expert.png\",\"keywords\":[\"IT bezpecnost\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/\",\"url\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/\",\"name\":\"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop - Nethemba\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nethemba.com\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/2018_Nethemba_IT-bezpecnostny-expert.png\",\"datePublished\":\"2018-03-28T08:19:31+00:00\",\"dateModified\":\"2018-03-28T09:03:26+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#\\\/schema\\\/person\\\/5f4ba68c8e1a2013d30e0804245b8234\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nethemba.com\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/2018_Nethemba_IT-bezpecnostny-expert.png\",\"contentUrl\":\"https:\\\/\\\/nethemba.com\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/2018_Nethemba_IT-bezpecnostny-expert.png\",\"width\":1142,\"height\":857},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/ako-si-maximalne-zabezpecit-laptop\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nethemba.com\\\/de\\\/home-new-2025\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#website\",\"url\":\"https:\\\/\\\/nethemba.com\\\/de\\\/\",\"name\":\"Nethemba\",\"description\":\"We care about your security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nethemba.com\\\/de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#\\\/schema\\\/person\\\/5f4ba68c8e1a2013d30e0804245b8234\",\"name\":\"Pavol Lupt\u00e1k\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g\",\"caption\":\"Pavol Lupt\u00e1k\"},\"sameAs\":[\"https:\\\/\\\/www.nethemba.com\\\/\"],\"url\":\"https:\\\/\\\/nethemba.com\\\/de\\\/author\\\/nethemba-admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop - Nethemba","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/","og_locale":"de_DE","og_type":"article","og_title":"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop - Nethemba","og_description":"TO, \u017dE NIE STE PARANOIDN\u00cd, NEZNAMEN\u00c1, \u017dE S\u00da VA\u0160E D\u00c1TA V BEZPE\u010c\u00cd. S rast\u00facou komplexnos\u0165ou hardv\u00e9ru aj softv\u00e9ru je odha\u013eova\u0165 zranite\u013enosti alebo zadn\u00e9 vr\u00e1tka \u0165a\u017e\u0161ie ako kedyko\u013evek predt\u00fdm. Kritick\u00e9 zranite\u013enosti sa ned\u00e1vno objavili vo v\u0161ade dostupn\u00fdch procesoroch (Meltdown\/Spectre), podobne\u00a0zadn\u00e9 vr\u00e1tka\u00a0(Intel ME). Prehliada\u010de s mno\u017estvom roz\u0161\u00edren\u00ed za\u010d\u00ednaj\u00fa by\u0165 najzlo\u017eitej\u0161ie internetov\u00e9 aplik\u00e1cie vo va\u0161om po\u010d\u00edta\u010di. Pri s\u00fa\u010dasnej [&hellip;]","og_url":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/","og_site_name":"Nethemba","article_publisher":"https:\/\/www.facebook.com\/nethemba","article_published_time":"2018-03-28T08:19:31+00:00","article_modified_time":"2018-03-28T09:03:26+00:00","og_image":[{"width":1142,"height":857,"url":"https:\/\/nethemba.com\/wp-content\/uploads\/2018\/01\/2018_Nethemba_IT-bezpecnostny-expert.png","type":"image\/png"}],"author":"Pavol Lupt\u00e1k","twitter_card":"summary_large_image","twitter_creator":"@nethemba","twitter_site":"@nethemba","twitter_misc":{"Verfasst von":"Pavol Lupt\u00e1k","Gesch\u00e4tzte Lesezeit":"15\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#article","isPartOf":{"@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/"},"author":{"name":"Pavol Lupt\u00e1k","@id":"https:\/\/nethemba.com\/de\/#\/schema\/person\/5f4ba68c8e1a2013d30e0804245b8234"},"headline":"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop","datePublished":"2018-03-28T08:19:31+00:00","dateModified":"2018-03-28T09:03:26+00:00","mainEntityOfPage":{"@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/"},"wordCount":3058,"commentCount":0,"image":{"@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#primaryimage"},"thumbnailUrl":"https:\/\/nethemba.com\/wp-content\/uploads\/2018\/01\/2018_Nethemba_IT-bezpecnostny-expert.png","keywords":["IT bezpecnost"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/","url":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/","name":"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop - Nethemba","isPartOf":{"@id":"https:\/\/nethemba.com\/de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#primaryimage"},"image":{"@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#primaryimage"},"thumbnailUrl":"https:\/\/nethemba.com\/wp-content\/uploads\/2018\/01\/2018_Nethemba_IT-bezpecnostny-expert.png","datePublished":"2018-03-28T08:19:31+00:00","dateModified":"2018-03-28T09:03:26+00:00","author":{"@id":"https:\/\/nethemba.com\/de\/#\/schema\/person\/5f4ba68c8e1a2013d30e0804245b8234"},"breadcrumb":{"@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#primaryimage","url":"https:\/\/nethemba.com\/wp-content\/uploads\/2018\/01\/2018_Nethemba_IT-bezpecnostny-expert.png","contentUrl":"https:\/\/nethemba.com\/wp-content\/uploads\/2018\/01\/2018_Nethemba_IT-bezpecnostny-expert.png","width":1142,"height":857},{"@type":"BreadcrumbList","@id":"https:\/\/nethemba.com\/de\/ako-si-maximalne-zabezpecit-laptop\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nethemba.com\/de\/home-new-2025\/"},{"@type":"ListItem","position":2,"name":"Ako si maxim\u00e1lne zabezpe\u010di\u0165 laptop"}]},{"@type":"WebSite","@id":"https:\/\/nethemba.com\/de\/#website","url":"https:\/\/nethemba.com\/de\/","name":"Nethemba","description":"We care about your security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nethemba.com\/de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Person","@id":"https:\/\/nethemba.com\/de\/#\/schema\/person\/5f4ba68c8e1a2013d30e0804245b8234","name":"Pavol Lupt\u00e1k","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g","caption":"Pavol Lupt\u00e1k"},"sameAs":["https:\/\/www.nethemba.com\/"],"url":"https:\/\/nethemba.com\/de\/author\/nethemba-admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/posts\/2643","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/comments?post=2643"}],"version-history":[{"count":0,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/posts\/2643\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/media\/2610"}],"wp:attachment":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/media?parent=2643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/categories?post=2643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/tags?post=2643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}