3 ms·
If the disc is encrypted (and otherwise nothing would save you anyway), why do I need the Secure Boot, really? What harm it can do for somebody to boot my devic
by krick 2y ago
If the disc is encrypted (and otherwise nothing would save you anyway), why do I need the Secure Boot, really? What harm it can do for somebody to boot my device from an unauthorized drive?
- AlphaJack 2y agoThe threat model is the Evil Maid Attack. I found Secure Boot + UKI + TPM PIN (God forbids automatic unsealing) + FDE to be great for both security and usability. [0]: https://en.wikipedia.org/wiki/Evil_maid_attack https://en.wikipedia.org/wiki/Evil_maid_attack