4 ms·

I believe many UEFI implementations allow you to replace the secure boot keys with your own. I've not done it personally as most of my machines I just disable

• jart 5y ago
  That's why I was used the word consumers. Rolling your own crypto will let you work around the requirement of asking Microsoft for permission to install our own operating system. But it limits the audience for your work to the technical class.
  • Shared404 5y ago
    /me removes foot from mouth I see what you mean now, I screwed up reading your first comment.
    • jart 5y ago
      I think this is the first time someone has ever reacted non-negatively towards me online after I brought up the subject. UEFI has good PR and I think people refuse to believe the implications of what happened. It would be like having Google officially be the only CA for HTTPS certificates and then removing HTTP from Chrome. That's basically what the security community did with PCs.
      • Shared404 5y ago
        That surprises me. Much better in my opinion to listen then to assume I know better - especially because I'm familiar with your work. Even though Secure Boot can be disabled on most hardware afaict [0] that's still a step consumers won't take so the point still stands easily. Especially with the amount of "you will break everything and kick a a puppy" that manufacturers throw in there to disuade anyone who manages to get to the menu. [0] worked at a repair ahop until 1.5ish weeks ago, have disabled SB on a lot of hardware.