The only "downside" is no Windows VMs, but they don't seem to care about that.

  "The government of Columbia has agreed to all of President Trump's terms, including the unrestricted acceptance of all illegal aliens from Colombia returned from the United States, including on U.S. military aircraft, without limitation or delay. Based on this agreement, the fully drafted IEEPA tariffs and sanctions will be held in reserve, and not signed, unless Colombia fails to honor this agreement. The visa sanctions issued by the State Department, and enhanced inspections from Customs and Border Protection, will remain in effect until the first planeload of Colombian deportees is successfully returned. Today's events make clear to the world that America is respected again. President Trump will continue to fiercely protect our nation's sovereignty, and he expects all other nations of the world to fully cooperate in accepting the deportation of their citizens illegally present in the United States."

.

What Purism offers with its Pureboot and hardware security chip that enforces deemed-tolerable ME payload is sufficient enough for our ask.

.

> Are there any modern Intel systems that can

The lack of availability of a product does not change the desire for the product to exist. RISC-V is already successfully playing in a market space with products that satisfy my asks above, maybe Intel can catch up some day.

.

> clients' needs,

Our clients came to us and were clear about what their ask was. I'm kind of chuckling right now, because one of clients in particular, if he saw your post would shoot back with "it's not called the Bill of Needs".

Some of the other ones are government. But I appreciate you trying to be helpful.

And I want one or two for myself too, sans the backdoors...

Put an OpenBSD machine to act as a router/firewall between supplied devices and your own network to keep things clean.

  - where can I set machine-owner-key for rEFInd to do secure boot with Linux?

  - where can I set the *real* machine-owner-key to load only a copy of board firmware compiled from not-license-encumbered source code on a machine I control?

  - can I remove the wireless network interface so that I have a wireless network interface that does not run binary blobs?

  - is there a clean interface to remove the Intel Management Engine binary blob and replace it with something that I can see the code so don't need to worry about something opaque and untrusted having "ring -3" access to my system?

.

> Is this a use case for Torrents?

Yes, provided you have a good way to dynamically append a distributed index of torrents and users willing to run that software in addition to the torrent software. Should be easy enough to define in container-compose.

  https://www.snopes.com/fact-check/trump-very-fine-people/

  https://www.snopes.com/fact-check/trump-very-fine-people/

The college educated person -- but not the university educated STEM degree holder -- takes these three things to mean what they are labeled as at face value.

If you could elaborate on this further, I and others are probably very interested in reading more about it.

It'd be really convenient for me, well not me but others, if we could tell our customers this. However, those of us running DBaaS do have to offer an actual no-downtime upgrade.