3 ms·
If you don't have the money or space what you can do is just have 2 hard drives, one fully encrypted running whichever OS you want and one with windows. Unplug
by l-albertovich 5y ago
If you don't have the money or space what you can do is just have 2 hard drives, one fully encrypted running whichever OS you want and one with windows.
Unplugging the secure one when booting into the insecure one would be ideal but not required.
In this case you'd still be vulnerable to certain EFI based attacks but at least you'd be safe from most common crooks.
I mean, seriously, running stuff with wine is OK if your expectatives are aligned with reality which is, you're running stuff there.
If you complain about wine but then are completely fine with the typical 'curl XXX | bash" well, yeah, you're SoL but other than that some degree of separation is good.
- badsectoracula 5y agoI don't think there is a point on doing that, Windows isn't even running if you dual boot, why bother having 2 hard drives? Just place Windows in another partition. But the point is to get rid of Windows completely without giving up the ability to play Windows games.
- l-albertovich 5y agoThey point of having 2 drives is being able to better isolate your secure system. If you physically unplug your secure drive then you know for sure that no fun stuff is going on behind your back. I'm not entirely sure about secure boot when it comes to validating the boot loader of an installed system so I can't vouch for that but I do know that UEFI kits aside, unless you have a proper way to validate the secure systems boot loader it could be tampered with if the disk is accessible by a compromised system. IMO the point is not to get rid of windows but to isolate whichever insecure system you use in a way in which it can't hurt the secure system (it could even be a secondary Linux system where you use Wine if that's what you want)