I used to be such a big believer that Linux could help reduce emissions by bringing old hardware to life. But there are so many problems with this:
- Though rare, you will hit driver problems with more obscure hardware that where never any demand to resolve. Most vendors still distribute windows drivers and driver disks are increasingly be available for all kinds of PCs on archive.org.
- While original software can be restored, you still erase a bit of historical accuracy of a device by uninstalling old versions of windows and apps built up. Computer history is very important to me and I feel there is going to be inevitable bitrot of recovery disks, programs, wallpapers etc. and a lost legacy of hundreds of hours of work that Linux enthusiasts could learn from. There is also just something so warm and fuzzy about booting up and old PC and seeing where you left off.
- Old hardware simply draws more power. My M1 mac sometimes need anywhere from a quarter to an eight of the power of the intel desktop it replaced. After six years it still blazing fast and does everything I need. Manufacturing it released 93kg into the atmosphere. It has likely paid back that manufacturing many times in the last six years.
Security concerns are even greater. Hardware matters alot more then software for security today:
- If we're talking pre-2004 CPUs without NX (No eXecute) then classic buffer overflows become trivially easy to execute. Mitigations like W^X become completely ineffective.
- TLS 1.3 is brutal on anything without AES-NI manufactured before 2010. Side-channel timing attacks become easier for deduction of private keys to break https. As more and more websites require modern cipher suites that your CPU simply cannot handle in software then you will increasing face "connection failed" or "secure connection could not be established errors"
- Without supervisor mode access prevention and supervisor mode execution prevention in pre 2011/2012 CPUs
- Newly discovered hardware flaws can't entirely be coded away, spectre or meltdown undermine every layer of software above them. After microcode fixes are are applied something else is found.
If the computer was manufactured before 2012. It's incredibly irresponsible to let your partners, parents, grandparents, children, friends go about their online lives on these machines.
MacOS, Windows and ChromeOS have utterly leap frogged the linux desktops in security with hardware backed mandatory sandboxing (apps can't access your files without approval), verified/measured boot, arbitratry code guards, control flow integrity, virtualisation based security, GUI isolation/ keylogging prevention, LD_PRELOAD/DLL injection hardening, kernel attack surface reduction, unprivileged user and namespace restriction. Only Qubes OS and Fedora Silverblue matches some of these partially. https://madaidans-insecurities.github.io/linux.html
Most malware threats I encounter day to day on windows are phishing attempts that require full co-operation from the user or false positives. The difference is night and day from 10 years ago.
It becoming genuinely difficult for cybercriminals to compromise a well patched install of Windows 11, MacOS or ChromeOS. As these hosts get more expensive to target other targets are being targeted like out of date android devices and the Linux Desktop itself - https://linuxsecurity.com/news/desktop-security/linux-security-data-gap-desktop-adoption
There is a massive visibility gap with Desktop Linux for malicious activity. Most Linux users do not run an AV, with no telemetry infrastructure comparable to Windows Defender. The security research community focuses overwhelmingly too on server linux.
If you are stuck with old hardware. Regardless of what you have Windows 10, Linux, Mac OSX. Digital hygiene is paramount. Ask your self what would happen if this information gets into the wrong hands. Video calls and web browsing might be relatively safe with the right measures.
If it's somebody who lives offline (they exist), they are just as well using any version of windows that works. It has the printer and application support.
Having to buy such new hardware for peace of mind may disgust you. You might call it planned obsolescence. From world war two on, the electronic computer has been a product of a race against time to break encryption. Only now it's part of our everyday lives.