4 ms·
I'm endlessly fascinated by people who have one major problem (inability to run unsigned code) and assign blame to another thing (secure boot). We're talking ab
by philistine 4y ago
I'm endlessly fascinated by people who have one major problem (inability to run unsigned code) and assign blame to another thing (secure boot). We're talking about technology here! The problem is one of implementation.
And Apple, of all companies, has offered an implementation solution. Their ARM chips in Macs can boot an OS with a fully-vetted chain of trust on the same drive as a completely untrusted Linux distro. And macOS does not reduce its security level to allow this. Why can't Intel do that? Wouldn't that be a great compromise? Don't any Linux people see value in a chain of trust?
- erik_seaberg 4y agoSigned code is great iff the user can sign code and choose whose signatures are valid.
- Longlius 4y agoThere's nothing wrong with chain of trust. There's everything wrong with the end user not being allowed to choose which chain of trust to allow.