3 ms·
Summary: Secure boot will be turned on by default and will prevent booting alternative operating systems. But you will be able to turn it off if you know how t
by Andys 15y ago
Summary: Secure boot will be turned on by default and will prevent booting alternative operating systems.
But you will be able to turn it off if you know how to use a BIOS, unless your hardware vendor has disabled the ability to turn it off in order to reduce their support burden.
- hollerith 15y agoThat's a misleading summary! Under the OP's proposal, you will be able to boot any OS from removable media. Furthermore, if the vendor of the OS follows some simple instructions (involving placing a key in a certain file), the BIOS will ask you if you want to permit future boots -- from removable and non-removable media -- of that OS. So for example once you have booted Ubuntu from removal media and answered yes to the question, from then on you will be able boot any version of Ubuntu from any (removable or non-removable) volume without being peppered with any more secure-boot-related questions. Although some PC vendors might not implement the proposal, you can say that of any proposal. Very good proposal IMHO.
- deleted 15y ago[deleted]
- hollerith 15y agoWe gain if there are any OEMs that do implement the proposal.
- deleted 15y ago[deleted]
- jbri 15y agoYou ... have gained the ability to use secure boot? Validating the integrity of the operating system using code stored as part of the operating system doesn't buy you anything - a prospective virus writer would just make sure to patch that checking code as well. You need to check integrity from outside that sandbox for it to be meaningful. While the bios code does run on the same CPU as everything else, the important part is that it runs first - and the correct way of handling the keystore is to prevent it from being written to once non-bios code has started executing.