4 ms·

More than 4 in 10 PCs still can't upgrade to Windows 11

6 points by orionion 4y ago

chatterhead 4y ago
1 in 4 of my PCs is this way by design. Kiss my grits, Billyboy!
dane-pgp 4y ago
But in a few years, governments will be able to confidently claim that any device not running in so-called Secure Boot mode is a cyber-security risk and can't be allowed online. Similarly, they'll claim that all devices must either only run apps from "approved" app stores, or have a system like Apple's "Gatekeeper" which checks every binary you try to run against a central blacklist of forbidden apps. Then you can kiss goodbye to P2P downloading, E2EE messengers, Tor, cryptocurrencies, and VPNs (unless those apps also implement blacklisting/whitelisting, or their developers will face criminal liability for what users do with them).
LargoLasskhyfv 4y ago
Keep it.
stjohnswarts 4y ago
I consider this a feature. It convinced me to move two windows laptop "servers" to pop_os LTS. That's fine windows execs, keep digging the grave of your OS, we all know you want everything online so you can charge monthly merely to use an "OS"
- dngray 4y ago
  I don't fault Microsoft for increasing the security baseline, it's a fact that threats actors are getting smarter in general. If they did nothing, people would whinge that "Windows is so insecure". The reality is that Linux is starting to fall into this category. Having said that work on using the TPM has already taken place with systemd-cryptenroll and systemd-measure and it will be nice when "Legacy BIOS" is deprecated from most mainstream desktop distributions. Maybe some day we will see some sort of immutable system that uses fs-verity, where "apps" are installed from an app store like Snap or Flathub. Then maybe we'll get some proper app sandboxing. https://www.freedesktop.org/software/systemd/man/systemd-cryptenroll.html https://www.freedesktop.org/software/systemd/man/systemd-cry... https://www.freedesktop.org/software/systemd/man/systemd-measure.html https://www.freedesktop.org/software/systemd/man/systemd-mea... https://www.kernel.org/doc/html/latest/filesystems/fsverity.html https://www.kernel.org/doc/html/latest/filesystems/fsverity....

6 points by orionion 4y ago

1 in 4 of my PCs is this way by design. Kiss my grits, Billyboy!

But in a few years, governments will be able to confidently claim that any device not running in so-called Secure Boot mode is a cyber-security risk and can't be allowed online. Similarly, they'll claim that all devices must either only run apps from "approved" app stores, or have a system like Apple's "Gatekeeper" which checks every binary you try to run against a central blacklist of forbidden apps. Then you can kiss goodbye to P2P downloading, E2EE messengers, Tor, cryptocurrencies, and VPNs (unless those apps also implement blacklisting/whitelisting, or their developers will face criminal liability for what users do with them).

LargoLasskhyfv 4y ago

Keep it.

stjohnswarts 4y ago

I consider this a feature. It convinced me to move two windows laptop "servers" to pop_os LTS. That's fine windows execs, keep digging the grave of your OS, we all know you want everything online so you can charge monthly merely to use an "OS"

dngray 4y ago
I don't fault Microsoft for increasing the security baseline, it's a fact that threats actors are getting smarter in general. If they did nothing, people would whinge that "Windows is so insecure". The reality is that Linux is starting to fall into this category. Having said that work on using the TPM has already taken place with systemd-cryptenroll and systemd-measure and it will be nice when "Legacy BIOS" is deprecated from most mainstream desktop distributions. Maybe some day we will see some sort of immutable system that uses fs-verity, where "apps" are installed from an app store like Snap or Flathub. Then maybe we'll get some proper app sandboxing. https://www.freedesktop.org/software/systemd/man/systemd-cryptenroll.html https://www.freedesktop.org/software/systemd/man/systemd-cry... https://www.freedesktop.org/software/systemd/man/systemd-measure.html https://www.freedesktop.org/software/systemd/man/systemd-mea... https://www.kernel.org/doc/html/latest/filesystems/fsverity.html https://www.kernel.org/doc/html/latest/filesystems/fsverity....