Computer Shopper - UK (2019-08)

HELPFILE&BUSINESSHELP

ISSUE 378|COMPUTERSHOPPER|AUGUST 2019 129

I’ve just bought and set up abarebones

mini PC with which I’m very happy, but

as Iwas researching my purchase Isaw

some Chromebox computers, which are

very attractively priced. While I’ve got

no interest in using Chrome OS, Iwonder

if it would be possible to ditch it and

install aLinux distribution instead.

I’d be interested to understand how

Chrome OS is installed: is it on an SSD,

or is it burned permanently intoachip?

Ilooked around the web to see if Linux

could be installed instead of Chrome OS,

but what Iread suggested that this

might not be straightforward.

RG Willis

Chromebox PCs are essentially the desktop

version of aChromebook laptop: both run

Chrome OS, alightweight, Linux-based

operating system maintained and updated

by Google.The operating system is stored

on asmall SSD,typically with acapacity of

around 32GB, the remainder of which is

available forlocal storage; you can’t easily

access or replace the OS.

Depending how strictly you interpret

the phrase ‘install aLinux distribution’,

LinuxonaChromebox?

there are several possibilities open to you

to attempt this. The most straightforward

method is to open the Chrome Shell, aLinux

Terminal-like environment in which you can

access more in-depth settings. On any

Chrome OS device,just open the Chrome

browser and hit Ctrl-Alt-T.

Your ‘Beat the Hackers’ feature (Shopper
371) was very helpful, but it raised some
concerns. While I’ll change my Amazon
password pronto, Iwon’t follow your advice
to confirm its strength by showing it to
Password Meter.How strong is Password
Meter’s own security,Iwonder? I’d ask the
same question about LastPass, which you
recommended we use to store passwords.
Ihaveone other question relating to
the feature: if Idoafactory reset on my
phone before trading it in, has my stored
data been thoroughly wiped, or could
someone with the right know-how and
hardware still get access to it?
Alan Thomas

Many web-hosted password-strength meters
use jQuery,aJavaScript library that operates
within the browser.Alegitimatepassword
strength meter won’t send the password to
the internet, but you can help ensure this by
loading the meter from within an incognitoor
privatebrowsing session (so the page can’t
save cookies), disconnecting your computer
from the internet by pulling out its Ethernet
cable or disabling the wireless connection,
and only then testing your password(s).
Close the password meter before reconnecting
the computer to the internet.
LastPass is adifferent proposition, as its
core functionality includes synchronising and

Howsafeissafer?

sharing passwords between devices over the

cloud. To achieve this safely,the app encrypts

all passwords and other sensitive information

on the device,and only synchronises

encrypted data. As the password is never

transmitted, and the keys used to encrypt

and decrypt information are never sent to

LastPass, the company itself has no access

to your data. Or that’s the theory: while

we’ve no reason to doubt LastPass, we only

have its word forthis. As its software is

proprietary,rather than open source,it’s not

available to inspect and verify.

The encryption used by LastPass protects

you if the company is hacked. In theory,a

sophisticated man-in-the-middle attack could

intercept some encrypted data as it travels

between your devices. In both cases,

provided you’ve chosen arobust master

password, your data would essentially be

impossible to decrypt.

Regarding your phone,the answer

depends on the age and type of phone,and

what settings you’ve selected. Unencrypted

Android, Apple and Windows phones may

contain data that’s easy to recover after a

reset. However,ifyou have an iPhone running

iOS 5orlater or an Android phone running 7.0

(Nougat) or later,your data should be

encrypted by default. While encrypted files

mayremain after afactory reset, theyshould

be almost impossible to access. If even a

Youcould

install aversion of

Ubuntu on the

Chromebox using

Crouton, which

sets up Ubuntu

to run parallel to

Chrome OS, and

lets you switch

between the two

without rebooting.

However,from

version 69

onwards, Chrome

OS has offered

similar,native support foraLinux

environment, although it’s still in beta. It

offers aproper Terminal in which you can

install and updateLinux packages, but

speakers, microphones, cameras and USB

devices aren’t yet supported, and nor is

hardware acceleration.

⬆Newer phones should be encrypted by default.

If you can’t take the chance,shred rather than

sell your old phone

remotechance is toomuch, however,the only

guaranteed safeoption is to shred the phone

rather than selling it. Look foralocal

shredding service that handles IT equipment.

⬅It’s only in beta,

but since version

69 you can run

asandboxed

Linux session in

Chrome OS