4 ms·

> completely useless if you care about Measured Boot I stopped reading there. All these engineers who help build and defend this draconian crap should be force

• tpoacher 2y ago
  Of all the horrible punishments you could have envisioned, you went full-on "I have no mouth and I must scream" there...
  • fuzzfactor 2y ago
    Merciless life sentence without any chance of parole. Envious of trustees having netbooks.
• mjg59 2y ago
  Measured boot is, in itself, under user control - you can seal whatever secrets you want to any specific state and they'll only be accessible in that situation. This has obvious benefits in terms of being able to (for instance) tie disk encryption keys to a known boot state and so avoid needing to type in a decryption phrase while still preventing anyone from being able to simply modify your boot process to obtain that secret. The largest risk around this is from remote attestation, and that's simply not something where the infrastructure exists for anyone to implement any kind of user restriction (and also it's trivial to circumvent by simply tying any remote attestation to a TPM that's not present at boot time and so can be programmed as necessary - it's just not good at being useful DRM)
  • kasabali 2y ago
    > in itself Unfortunately nothing is "in itself" in the real world. All these so called security features end up locking down users more and more in their own devices.