Here I will define 'secure' a computer that meets the following criteria:

• its firmware is open-source;

• the Intel Management Engine (ME) is non-existent, physically removed, physically deactivated or can be deactivated at firmware level; to learn about ME see for example here;

• the Wi-Fi is non-existent, physically removed, physically deactivated or can be deactivated at firmware level;

• the webcam and microphone are non-existent, physically removed, physically deactivated or can be deactivated at firmware level.

The following brands produce such computers:

• starlabs.systems

• nitrokey.com

Some of these features are also found in certain computers from raspberrypi.com, which however are recommended only for specific purposes and small server functions: not for the purposes of this course (except for the Bitcoin node in Course 2).