3 ms·
>Unfortunately, we are very far away from that goal. Not at all. It's commonplace in UEFI motherboards. You can supply your own keys and then sign your kernel/
by mixedCase 10y ago
>Unfortunately, we are very far away from that goal.
Not at all. It's commonplace in UEFI motherboards. You can supply your own keys and then sign your kernel/bootloader.
Microsoft just decided the owners of these devices should not be allowed to control their device's boot process.
- soylentcola 10y agoI think that's why the "jailbreak" wording I've seen used is fairly appropriate. The flip side to the risks that result from trusting some sort of locked bootloader for security also mean that you can gain more control over your gear. On one hand, I think that aspect is wonderful news but on the other hand, there are already a lot of options for devices with unlocked (or unlockable) bootloaders and some orgs may have specifically desired the locked option as part of their security setup and this undermines that. The only thing that is relevant regardless is how it illustrates the flaws in any system that relies on secret master keys/backdoors