Coreboot is missing as alternate firmware option. about itpol

[mricon]

I agree with you about ChromeBooks, but unfortunately they are not suitable for sysadmin work unless you enable developer mode and thus nullify a lot of protections. :(

[zaolin]

You can easily rebuild your chromebook's bios and ec firmeware and reflash them with a different configuration, payloads and cryptographic keys. It's a lot of work but how you can gain more security. You can also try to adapt some features of chromium os. Take a look at:

https://www.chromium.org/chromium-os/chromiumos-design-docs/system-hardening

for more impressions.

[unixbhaskar]

@zaolin @mricon And it's certainly not child's play to reflash bios and ec. One has to have the understanding what they are doing. One misstep and you brick the device.

I think a much better option would be "owning" your own device and platform. You should probably follow Greg or James blogs about it .Very descriptive and well written. So, you can be sure, what you have and what you run.YMMV