3 ms·
Linux computers with an approved boot chain and software environment. Gentoo users are out, as is anyone making a custom kernel.
by jasonjayr 3y ago
Linux computers with an approved boot chain and software environment. Gentoo users are out, as is anyone making a custom kernel.
- macNchz 3y agoI imagine also anyone who, despite being on an approved distro, has had to enroll their own key to build and sign drivers as well.
- jeroenhd 3y agoGentoo users and people running Nvidia drivers and the like will be out, that's true. That's very different from "only certain architectures allowed", though. Even still, there are ways to implement this using an open source, signed, reproducibly built daemon that gets loaded early in the boot process. Altering the daemon would've out of the question but it would solve the more immediate problem of "Netflix doesn't work" that most people would actually care about.
- raxxorraxor 3y agoNetflix can only discriminate because we have attestation in the first place. This is not a security mechanism anymore.