The Evangineer Lemmy
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Xatolos@reddthat.com to Technology@lemmy.worldEnglish · 2 years ago

Secure Boot is completely broken on 200+ models from 5 big device makers

arstechnica.com

external-link
message-square
76
fedilink
  • cross-posted to:
  • technology@lemmy.ml
315
external-link

Secure Boot is completely broken on 200+ models from 5 big device makers

arstechnica.com

Xatolos@reddthat.com to Technology@lemmy.worldEnglish · 2 years ago
message-square
76
fedilink
  • cross-posted to:
  • technology@lemmy.ml
Keys were labeled "DO NOT TRUST." Nearly 500 device models use them anyway.
  • pastermil@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    33
    ·
    2 years ago

    What is Secure Boot actually good for? Serious question.

    • thearch@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      35
      ·
      2 years ago

      deleted by creator

      • bruhduh@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        ·
        edit-2
        2 years ago

        I had dell pc refuse to boot Linux mint because of secure boot

        • nul9o9@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          2 years ago

          I’ve been wary of secure boot and pluton chips for this reason.

        • Emerald (she/her)@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          2
          ·
          2 years ago

          Then you haven’t set it up right

          • bruhduh@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            ·
            2 years ago

            Nah man, it didn’t even allowed to boot iso from ventoy until i disabled secure boot

            • SSJMarx@lemm.ee
              link
              fedilink
              English
              arrow-up
              3
              arrow-down
              1
              ·
              edit-2
              1 year ago

              deleted by creator

              • Emerald (she/her)@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 years ago

                I just don’t bother with secure boot as its not in my threat model. I turn it off

            • Emerald (she/her)@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 years ago

              Well of course, thats the setup. Disabling secure boot. If it didn’t stop you from booting a third party OS without you toggling that BIOS option, then the security feature would be pointless.

              • bruhduh@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 years ago

                Imagine if in the future that option becomes untouchable

                • Emerald (she/her)@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  2 years ago

                  Then it would be an issue and I would not suggest anyone buy those machines

    • TexMexBazooka@lemm.ee
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 years ago

      Speaking from my background, it prevents someone from trying to boot using an external device to access your system, assuming you have a BIOS password in place.

      Of course encrypting your drive works just as well, but security in depth demands a “why not both?” Approach

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 4.24K users / day
  • 8.8K users / week
  • 15.9K users / month
  • 31.1K users / 6 months
  • 1 local subscriber
  • 83.6K subscribers
  • 11.9K Posts
  • 429K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • BE: 0.19.4-rc.5
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org