Maple Grove Report

Maple Grove Report

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.


ThinkPads: Why do they have a cult following? What do they offer that your current laptop doesn’t? They’re more than mere specs; for some, they’re a passion. It’s a strange affinity to truly love a brand of laptop, but some swear by it—and I have five reasons.

ThinkPads are one of the most recognizable laptops out there. They’ve been around for decades and adored by many. In the Linux world, ThinkPads are renowned for their fantastic compatibility and are frequently recommended. Many Linux users vouch for them (including me). But there’s more to them than just hardware compatibility, and I’ll go over what makes this classic brand the perfect choice for fellow geeks.

Example of alias running on the Linux terminal.


5 hard truths about switching to Linux that Windows users need to hear

Before you format that drive, have a quick, honest chat with yourself.

Legendary serviceability

Cheap and easy-to-find parts flood the market

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition's box contents. Credit: Cianna Garrison / How-To Geek

If you’ve ever researched ThinkPads, you’ve probably come across droves of people praising their serviceability, and it’s all true. ThinkPad parts inundate online markets (like eBay) with options to fix anything you can think of. From screens to power modules, finding the part takes only minutes, all unambiguously labeled, cheap, and easy to install.

Repairability is one thing, but upgradability is another. It’s very common for ThinkPad users to mod their purchases—installing upgraded screens, extra hard disks, or additional RAM. Guides, ideas, and parts are easy to come by, so, unlike most other laptops, making an inexpensive ThinkPad purchase sometimes means bumping its offering to premium levels.

Unfortunately, their serviceability has taken somewhat of a hit in recent years. Some of the newer ThinkPads now solder RAM and Wi-Fi cards onto the board to save space and weight, which is a grave mistake if you ask me. However, every ThinkPad series has a different use case, and not all of them do that—the larger P-series models being one notable exception, and I’m sure there are more.

If modularity is a big concern, then weigh your options first. Lenovo provides detailed technical specification sheets—called PSREF (Product Specifications Reference)—for every model. Study these before a purchase.



















Quiz
8 Questions · Test Your Knowledge

Linux
Trivia Challenge

From a Finnish student’s side project to powering the world’s supercomputers — how well do you really know Linux?

HistoryCultureCommandsKernelFun Facts

In what year did Linus Torvalds announce the first version of the Linux kernel to the world?

Correct! Linus Torvalds posted his now-famous message to the comp.os.minix newsgroup on August 25, 1991, describing Linux as ‘just a hobby, won’t be big and professional.’ That turned out to be quite the understatement.

Not quite — Linus Torvalds made his famous announcement in 1991, when he was just 21 years old and a student at the University of Helsinki. He described it as a ‘hobby’ project, which is arguably the most successful hobby in computing history.

What is the name of the Linux mascot, and what kind of animal is it?

Correct! Tux the penguin became the official Linux mascot in 1996, designed by Larry Ewing. The name ‘Tux’ is often said to stand for Torvalds UniX, and the penguin was chosen after Linus mentioned he was once bitten by a penguin at a zoo.

The answer is Tux, a penguin! The mascot was chosen after Linus Torvalds mentioned being bitten by a fairy penguin at a zoo in Canberra, Australia. Designer Larry Ewing created the iconic image in 1996 using GIMP — fittingly, free software.

What type of kernel architecture does Linux use?

Correct! Linux uses a monolithic kernel, meaning the entire operating system runs in kernel space. This famously sparked a heated debate between Linus Torvalds and computer scientist Andrew Tanenbaum in 1992, who argued microkernels were the superior design.

Not quite — Linux uses a monolithic kernel, where the OS core runs as a single large process in kernel space. This was actually controversial, leading to a famous flame war between Linus Torvalds and professor Andrew Tanenbaum, who believed microkernels were the future.

What does the classic Linux command ‘sudo’ stand for?

Correct! ‘sudo’ stands for Superuser Do, and it allows permitted users to run commands with the security privileges of another user — typically the root superuser. It’s one of the most typed commands in Linux and has inspired countless memes about power and responsibility.

The answer is ‘Superuser Do’! While ‘switch user’ logic is involved, the name specifically refers to executing a command as the superuser (root). First developed in the 1980s, sudo is now a cornerstone of Linux security, letting admins grant elevated privileges without sharing the root password.

What percentage of the world’s top 500 supercomputers run Linux?

Correct! As of 2017, Linux achieved 100% domination of the TOP500 supercomputer list — and has maintained it ever since. From weather modeling to nuclear research to AI training, every single one of the world’s fastest supercomputers runs Linux.

Remarkably, the answer is 100%! Since November 2017, every single computer on the TOP500 supercomputers list has run Linux. It powers everything from climate simulations to particle physics research at CERN to AI model training at major tech companies.

Which operating system directly inspired Linus Torvalds to create Linux?

Correct! Torvalds was inspired by Minix, a small Unix-like OS created by Andrew Tanenbaum for educational purposes. Frustrated by Minix’s limitations and licensing restrictions, he set out to build his own kernel — and the rest is history.

The direct inspiration was Minix, a small educational Unix-like system created by professor Andrew Tanenbaum. Torvalds was using Minix on his new PC but found it too limited. His desire for a more capable, free system drove him to write Linux from scratch starting in 1991.

What does the ‘GNU’ in ‘GNU/Linux’ stand for?

Correct! GNU stands for ‘GNU’s Not Unix’ — a classic recursive acronym beloved by hackers. The GNU project was started by Richard Stallman in 1983 to create a completely free Unix-like operating system. Linux provided the missing kernel to complete the GNU system.

GNU stands for ‘GNU’s Not Unix’ — a recursive acronym, which is a playful trick where the abbreviation refers back to itself. Richard Stallman launched the GNU Project in 1983, years before Linux existed. When Torvalds released the Linux kernel, it completed the puzzle Stallman had started.

Which of the following runs on the Linux kernel?

Correct! Android is built on top of the Linux kernel, making Linux the most widely used OS on the planet when you count smartphones. Billions of Android devices worldwide are technically running Linux — Torvalds’ ‘hobby’ project ended up in nearly everyone’s pocket.

The answer is Android! Google built Android on top of a modified Linux kernel, which means billions of smartphones worldwide are running Linux under the hood. macOS and iOS use a Darwin/XNU kernel, and WSL runs Linux tools but translates syscalls rather than running the kernel natively.

Challenge Complete

Your Score

/ 8

Thanks for playing!

Exceptional build quality

Military-grade testing and an awesome keyboard

Lenovo ThinkPad X13 Gen 6 sitting on a table at MWC 2025. Credit: Justin Duino / How-To Geek

Many in the user base praise ThinkPads for their build quality. While some say it has decreased since the IBM days, it has a lasting reputation. In particular, people rave about their keyboard and layout. Personally, I’ve gone through a half-dozen of them, but the letters are usually fading off the keys when replaced, so perhaps I’ve gotten more value for money than I realize.

ThinkPads also undergo rigorous mil-spec testing (MIL-STD 810G) to evaluate them for resilience under extreme conditions.

Category

Test Type

Description

Kinetic Forces

Mechanical Shock

High acceleration, repeated shock (18 times).

Vibration

Tested while running and turned off.

Environment

Fungus

28 days with common fungus spores.

Fuel Vapor

Fuel vapor environments.

Sand and Dust

Different types of sand, for hours.

Shipboard Vibrations

4–33 Hz for 2 hours.

Weather

High Altitudes

15,000 ft.

Humidity

91–98% at 86–140°F [30–60°C].

Solar Radiation

7×24-hour cycles (simulated).

Extreme Temperatures

-13–140°F [-25–60°C], 3 cycles of 2 hours each.

Low Temperature

-13°F [-25°C] for 24 hours (-5.8°F [-21°C] while operating for 8 hours).

High Temperatures

145.4°F [63°C] for 24 hours (109.4°F [43°C] while operating for 8 hours).

If you look after your device, it will last many years. The workhorse models (e.g., T, P, or X series) have powerful processors in them, and unless you need cutting-edge hardware, they’ll last well into the future—mine is over 10 years old.

Value for money

A long-term cult following with plenty to offer

Lenovo ThinkPad T450s on a table. Credit: Bertel King / How-To Geek

Their cost-effectiveness is why I buy ThinkPads. They’ve long been a favorite for businesses, which frequently turn over hardware, dumping old devices in large quantities into public marketplaces.

You will find thousands of ThinkPads on eBay, all at enticing prices. Given the sheer volume of competition, it’s not uncommon to find a 2-3-year-old laptop for $300-$400. These devices are not slouches either; the P-series models go for raw power, with older models shipping a Quadro GPU and newer ones an Nvidia RTX.

You may pay extra for newer generations from the flagship line (X1 Carbon), but the iconic T series is the sweet spot—capable, light, and budget-friendly.

Series

Use case

E series

Small business. Budget.

L series

Enterprise; affordable. A step up from the E-series.

T series

Enterprise; mainstream. A workhorse for businesses.

P series

Workstation. A power-hungry T-series with dedicated GPU options.

X series

Mobile workhorse. A lighter T-series.

X1 series

Flagship (Intel).

Z series

AMD.

Yoga

360° swiveling screen.

Lenovo may have discontinued some of those listed, but you can still find them second-hand or refurbished, and often under $200.

2-3 year-old laptops for a mere few hundred bucks

For technical products, I always ensure first that they have a strong community. It’s a sign of good health, support, and sometimes even quality. Regular access to useful information is something people don’t value enough.

For other laptops, their communities may be sparse or too general, but the ThinkPad community has been strong for decades. There’s no shortage of help, inspiration, or guides, and so, if you decide to make a purchase, then know that you’re not only buying into a well-built, robust device but also the community.

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition

8/10

Operating System

Windows 11 Pro

CPU

Intel Core Ultra 7 258V Processor (8 Cores, 8 Threads, 12 MB Cache)

GPU

Intel Arc Xe2 GPU with >60 TOPS

RAM

32GB LPDDR5x 8533MT/s soldered, dual channel


Distinctive features

It’s not a ThinkPad if it doesn’t have that little red dot

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition laptop's leyboard. Credit: Cianna Garrison / How-To Geek

ThinkPads are immediately recognizable by the red dot in the middle of their keyboards (called TrackPoint). I’ve never understood why these exist, because I find them clunky. However, a significant portion of the user base stands behind them. I can’t tell if it’s a joke or not, but TrackPoints are a distinctive part of the ThinkPad brand.

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition laptop open on a desk.


Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition Review: Focused On AI Features

This portable ThinkPad delivers powerful computing and a stand-out OLED display.


I’ve had my ThinkPad for over a decade now, and it’s still hanging in there, despite neglect. If I had maintained it properly—dusting regularly and re-attaching all screws after maintenance—it would last another decade.

There are few laptops that I would consider when purchasing a new device, perhaps an HP EliteBook is one, but I’m happy with ThinkPads. I know what I get from them.

Lenovo’s decision to make newer models less serviceable is concerning because a failing component (like a Wi-Fi card) will require a soldering iron (or a computer repair shop).

However, their solid construction, widespread availability, low cost, and Linux support are the primary reasons I’ll probably stick with ThinkPads for years to come.

If I recommend a laptop, it’s a ThinkPad.

Thinkpad logo, hinge and rear camera of the Lenovo ThinkPad X12 Gen 2 Detachable.


Lenovo ThinkPad X12 Gen 2 Detachable Review: Simple Yet Functional

This detachable “laptop” has got it together.



Source link


Free VPNs leak your data while claiming privacy

Pierluigi Paganini
April 01, 2026

Most free Android VPNs track users, request dangerous permissions, and connect to risky servers, privacy comes at a hidden cost.

Free VPN apps are some of the most popular downloads on Android, promising privacy at no cost. But the reality is far from what they advertise. Most users tap “install” without a second thought, unaware that many of these apps collect and share personal data rather than protecting it. Mysterium VPN’s research provides concrete evidence of the risks hidden inside free VPNs, revealing how they operate behind the scenes and why “free” often comes with a high price for your privacy.

The research focused on 18 of the most popular free Android VPN apps from the Google Play Store. Each app was analyzed using MobSF, an open-source mobile security framework. This static analysis examined four main areas: the permissions requested by the app, any embedded third-party trackers, hardcoded network endpoints, and developer or third-party email addresses within the code. While static analysis cannot reveal real-time activity, the presence of these elements alone shows what the app is capable of and the potential dangers to users.

A major finding is the sheer number of embedded trackers. Trackers are pieces of software that collect data on user behavior, often for advertising or analytics. Out of the 18 apps tested, 17 contained at least one tracker, and the average app included nearly five. Some apps contained more than a dozen trackers, including platforms from the U.S., China, and Russia. Google’s advertising and analytics tools, like AdMob and Firebase Analytics, were present in nearly every app, and Facebook integration appeared in several, enabling cross-platform tracking. Apps such as Turbo VPN and VPN Proxy Master included Chinese platforms like Umeng and Mobvista, as well as Russian trackers like Yandex Ad. This means users attempting to avoid tracking are often exposed to extensive monitoring by multiple third-party companies.

Permissions requested by these apps revealed another layer of concern. A legitimate VPN needs only a few permissions: network access, the ability to create a VPN tunnel, and the ability to run in the foreground. Yet many apps requested far more, often with no relationship to VPN functionality. FreeVPN, for instance, requested 21 permissions, 12 of which are considered “dangerous” under Android rules. These included camera, microphone, contacts, call logs, precise location, and device storage access. Essentially, the app could record audio or video, read your call history, track your movements, and access your photos and files. This permission set resembles spyware more than a privacy tool. Other apps like VPN Proxy Master, VPN 360, and Secure VPN also requested a high number of dangerous permissions, some including the ability to modify system settings or display overlays, techniques that could enable clickjacking or other malicious behavior.

Network connections were another significant concern. Many apps connected to a large number of hardcoded domains, sometimes over 100 for a single app, far more than necessary for a VPN. Some of these domains were located in countries with strict state surveillance or subject to U.S. OFAC sanctions, such as China and Russia.

“Beyond trackers and permissions, perhaps the most alarming finding is the number of free VPN apps that contain hardcoded connections to servers in countries subject to OFAC sanctions or with documented state surveillance programs.” reads the report published by MysteriumVpn. “Routing VPN traffic through these jurisdictions exposes users to risks that no tracker policy or permission review can address.”

Using servers in these jurisdictions exposes users to additional risks, as local laws may require companies to log user traffic or provide access to government agencies. For example, Turbo VPN connects to Chinese servers on Alibaba’s network and includes multiple Chinese trackers. VPN Proxy Master communicates with both Chinese and Russian infrastructure while also embedding trackers from these countries. VPN 360 connected to 105 unique domains, combining multiple trackers with potentially risky server locations.

Other alarming behaviors include apps using plaintext HTTP connections instead of encrypted HTTPS, exposing data in transit. Some apps also included embedded emails, which could indicate a lack of professionalism or potential avenues for phishing and other attacks.

The research identifies the apps with the most concerning risk profiles. FreeVPN stands out for its extreme permissions, despite having no trackers. VPN Proxy Master combines high permissions, numerous trackers, and connections to risky infrastructure, making it the most comprehensive data collector. Turbo VPN is the “tracker king,” embedding platforms from three national advertising ecosystems. VPN 360 has the largest network footprint, with over 100 hardcoded domains. Secure VPN combines dangerous permissions with extensive tracking, including Facebook’s full suite.

The takeaway for users is clear: most free VPN apps are not primarily privacy tools. They are advertising and data collection platforms disguised as security apps. To protect yourself, review requested permissions carefully, audit apps for trackers using tools like Exodus Privacy, and be skeptical of free apps. Open-source and independently audited VPNs are safer, as are decentralized VPN networks, which reduce the risk of a single entity collecting or monetizing your data. Until app stores enforce privacy standards, users bear the responsibility of verifying the safety of any VPN they install.

In short, “free” often comes at a steep cost. Instead of privacy, many free VPNs deliver extensive surveillance, heavy tracking, and connections to potentially dangerous jurisdictions. Investing in a reputable, secure VPN is worth the cost for the protection and peace of mind it provides. Your digital privacy is valuable, and safeguarding it requires informed choices rather than relying on a zero-cost lure.

“The central finding of this research is straightforward: the overwhelming majority of popular free VPN apps on Android are not primarily privacy tools. They are data collection and advertising platforms that provide VPN functionality as a lure.” concludes the report. “The business model is clear, and the mechanisms for executing it are built into the app before a user ever opens it.”

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, VPNs)







Source link

Recent Reviews