Disclaimer: I didn't fully read the article yet. I wanted to mention the excellent HEADS project (as in the other side of TAILS): https://github.com/osresearch

Disclaimer: I didn't fully read the article yet. I wanted to mention the excellent HEADS project (as in the other side of TAILS): https://github.com/osresearch/heads https://github.com/osresearch/heads This talk is great: https://trmm.net/Heads_33c3 https://trmm.net/Heads_33c3 I remember when UEFI became a thing and people were complaining in linux forums that the keys are controlled by the manufacturers and 'the whole thing is a ploy by microsoft to kill linux' (UEFI is just a convoluted standard way to write BIOS in a certain way). Now we can control the keys, all we need to do is kick UEFI to the curb and use linux from BIOS all the way to the DE/WM (coreboot..). Turns out we can turn the boot process into a chain of kexec's and simplify everything greatly.