3 ms·
Techies seem to understand the value of chained secure boot on Android, where shady vendors in east asia routinely try to sneak malware onto phones they sell.
by sliverstorm 9y ago
Techies seem to understand the value of chained secure boot on Android, where shady vendors in east asia routinely try to sneak malware onto phones they sell.
What is different about PC? How do you defend against such attacks without a secure boot chain & a fixed trusted key set?
- keiyakins 9y agoHonestly, a fixed trusted keyset with a jumper you can use to switch to a programmable keyset. Ideally with a jumper to set that in programmable or read-only mode. That makes it extremely obvious when something wants to mess with it, without actually preventing you if that's actually what you want.
- digi_owl 9y agoSomething akin to the ChromeOS developer switch?
- khedoros1 9y agoI'm happy with the Android device as long as I can unlock the bootloader and flash my own OS. I'm happy with the PC as long as security settings don't stop me from installing my own OS. If I'm prevented, then I don't care about the security arguments; the device isn't useful to me. My solution there is to avoid buying from vendors that I consider shady.