3 ms·
It's almost like I addressed that. 1. This isn't about Microsoft having control. This is the only way to ship devices with Secure Boot enabled. What do you sug
by drivebyacct2 14y ago
It's almost like I addressed that.
1. This isn't about Microsoft having control. This is the only way to ship devices with Secure Boot enabled. What do you suggest exactly? That OEMs ship with Secure Boot enabled but without MS keys? Great. Everyone goes out, buys a new Windows laptop... and Windows doesn't boot.
2. You conveniently ignored everything about being able to disable it and enroll your own keys.
Your false ad hominem attack is insulting and wildly inaccurate. You'll note that I don't defend the use of Secure Boot on ARM where user-key-enrollment is forbidden. Not only is it insulting because it's blatantly ignoring half of my last post, it's also insulting because I've spent years campaigning against things like the Patriot Act with that quote and I'm well aware of the sentiment and enjoying freedom on my personal devices (as I tout my Galaxy Nexus with CM9 and unlocked bootloader).
- mjg59 14y agoThe easiest way to handle this would be to enrol keys on initial OS boot. If the user wants to wipe the preload then they can do that.
- drivebyacct2 14y agoI think that's a good idea. With a big "JUST PRESS ENTER" for the confused or unknowing folk.