3 ms·
A computer that boots code that loads un-signed modules isn't secure at all. I suspect that will be the outcome of UEFI: no effective increase in security, and
by tlb 15y ago
A computer that boots code that loads un-signed modules isn't secure at all. I suspect that will be the outcome of UEFI: no effective increase in security, and hassles installing new operating systems.
Frankly, I have no interest in my computer being secure in this way (running only code signed by companies). UEFI might have a place in kiosks or shared computers in public libraries, but not for a computer I own and physically control.
- silon3 15y agoUnless I can choose not to trust Microsoft, I don't trust Microsoft. A way to add/remove signing keys is necessary (think NSAKEY).
- tlb 15y agoAdding a key may involve typing in hundreds of hex digits to a BIOS screen, with typical BIOS user interface. That will be a barrier to switching to Linux.