Linux has a hidden cost. But I installed it on my old laptop anyway

I finally tried Linux on one of my PCs last night. It’s my first time on a device of my own—and security is definitely why I’m finally plunging down the rabbit hole.

Yep, security. You may never pay a cent for Linux, but it still costs you.

The problem

Like most people, I have old tech in my home. My main laptop is 9 years old. Its backup is an old corporate ThinkPad dating back to 2013. I take that second laptop to busy places or when I just don’t want to worry about theft. I’ve left it exactly as I got it—I’ve never added more RAM or swapped its spinning platter drive for a faster SSD.

I could have stuck with Windows 10, which still is getting security updates for now. But so is ChromeOS. Last year, to help boost performance, I switched. Google’s operating system is less demanding, which lets the ThinkPad run smoother during web browsing despite its age.

That decision only kicked the can down the road, though. Google ends support for ChromeOS on this ThinkPad in December. Before AI’s pervasive spread, I might have winged it and kept going with an unpatched ChromeOS build. 

But now that’s too risky. We’re in an era where you can’t even trust legitimate apps and browser extensions to be safe. I also looked at my bank account and decided that buying an SSD and going back to Windows 10 wasn’t a practical long-term solution. (Talk about cost.) Yet another thing to blame on the current AI frenzy in tech.

The solution

So I settled on Linux. But not after a lot of reading. And asking questions. And doing yet more reading. I’ve definitely spent more than a couple of hours getting the lay of the land.

I could have just picked a distro and run with it, sure. People constantly say in help forums and subreddits to just try live booting into Linux. I don’t think that’s a fair take, though—it’s a big ask of anyone with basic knowledge of PCs and zero of Linux. Even being an educated normie complicates matters—I know enough to be concerned about touchscreen support, audio drivers, and the like.

So I ended up devoting time to narrowing my options. I didn’t want to go through endless rounds of making a bootable USB drive, then spending a few weeks test-driving the distro.

Where’s the cost?

Linux fans love endless choice and customization. And if that’s your jam, spending leisure time exploring those options would be fun.

Problem is, a lot of us on the other side can suffer real quick from the paradox of choice. Which is absolutely why I started thinking about switching operating systems in August, but only finally picked a distro last week. (ZorinOS won out, despite some concerns about compatibility.)

I expect my hunt for the right distro will stretch into early 2027 before I understand what I like, what I don’t like, and what I can live with. For me, that’s a commitment. Time is as valuable a commodity as money—and for the moment, I can spend it more freely than cash. I chose to invest it into this Linux experiment. But it’s still an investment.

In the news

As sensitive data goes, I’d rank any medical info as pretty high—which makes it all the more unfortunate that Quest Diagnostics reported a data breach, with the number of affected patients still unknown.

Also unnerving: The staggering amount of financial loss reported by Binance, who says $6.3 billion in crypto was stolen through a compromised corporate laptop.

The bad

• Japan Airlines suffered a data breach of a third-party software system, leading to leaked information for 92,000 passengers. Stolen data includes reservation codes and flight details, as well as personal details for about 2,000 individuals. Other Asian airlines, including ANA, Asiana Airlines, and Korean Air, also appear to be affected. Be on the lookout for any phishing attempts related to past travel on those airlines.

• Ever had bloodwork done? Chances are Quest Diagnostics processed the testing—and your patient info may have been leaked in a recent breach. Currently, Quest says its investigation is ongoing, so the number of affected patients is unknown.

• Own a Netgear router or extender? You may need to update it—the company recently patched several flaws that affect a variety of models. If you have automatic updates installed, it’s still worth a look in your admin settings to make sure you’re on the latest firmware.

The ugly

• Hackers appear to have stolen $6.3 billion in assets from crypto exchange Binance. Originally estimated at $5.8 billion, the losses appear to stem from a compromised DevOps laptop, according to BleepingComputer. Binance currently says user funds are safe.

The appalling

• The state of Delaware may allow companies to be run by AI agents—which could let human owners avoid legal repercussions for any harmful outcomes. Currently, the federal government has its reservations about the proposal and its potential effect on corporate responsibility.

Tip of the week

Google says it wants to improve its personalized advertisements—and will now draw from Gmail, Photos, and Drive if you allow it. Previously, those services were left fully untouched.

My recommendation: Keep Google out of your email, photos, and documents. Google may not directly index that data for use, but enough information could leak that reveals way more than you’d ever intend.

To ensure that Gmail, Photos, and Drive are left out of personalized ads in search results, head to your account settings, then Data & Privacy > Personalization Settings > Manage Personalized Recommendations in Search Services > Connected Content Apps. Remove these three apps if they’ve been added.

Don’t want Google trying any personalization on you? Turn off Personalized Recommendations in Search services all together.