3 ms·
Why doesn't MS do similar on all of their OS code by placing it on a read-only filesystem? Only allow updates when reboot into an update mode.
by landemva 3y ago
Why doesn't MS do similar on all of their OS code by placing it on a read-only filesystem? Only allow updates when reboot into an update mode.
- WalterBright 3y agoI have zero faith in software read-only modes.
- Too 3y agoAndroid does this. OS is read only. Updates happen on second partition and takes effect by swapping partition on reboot. Integrity is verified by secure boot.
- landemva 3y agoInteresting. How is it verified? Maybe keep Merkle tree hash of eveything in TPM?