This is a really cool tip!!

You might like this project if you’re interested in a more aggressive filtering option: https://github.com/werman/noise-suppression-for-voice/

I’ve used it in the past to clean up a table mic for voice chat and worked pretty well. Requires a lot more config work than your approach does though.

Absolutely not — the skill level needed to tamper with a bashrc, pull credentials + keys, or generally hunt for sensitive info on an unencrypted disk is worlds apart from the skill level needed to modify an EFI binary.

There’s also PXE boot, secure boot, carrying around a live image on a flash drive, etc.

But any attacker advanced enough to tamper with your EFI partition in an evil-maid scenario has plenty of other options to log and steal your encryption passphrase, so it’s generally a moot point.

EDITOR=shred too if you’re brave or having a rough day.

I have xgrass installed from the x11-apps package.

I find it a suitable replacement and can’t even remember what the original looks like because I removed all the Windows from my house.