3 ms·
> Secure boot with just the MS keys is quite silly and ever since that one version of Grub could be exploited it's basically useless this isn't true: there's a
by blibble 5y ago
> Secure boot with just the MS keys is quite silly and ever since that one version of Grub could be exploited it's basically useless
this isn't true: there's a hash blacklist which is (supposed) to be regularly updated by your OS update mechanism
windows update does it anyway
- jeroenhd 5y agoIs there a way to list this blacklist? I have several computers which haven't received updates in years and I strongly doubt that the internal blacklist has been updated.
- blibble 5y agomokutil --dbx official list is here: https://uefi.org/revocationlistfile https://uefi.org/revocationlistfile (I have my own root configured for all of my machines so only stuff I've signed can boot)