3 ms·

and I imagine that the initramfs is not encrypted and trivially modifiable? Apple is able to achieve this securely because their devices are not fully encrypte

and I imagine that the initramfs is not encrypted and trivially modifiable? Apple is able to achieve this securely because their devices are not fully encrypted. They can authenticate/sign the unencrypted system partition.

klooney 1y ago
https://mastodon.social/@pid_eins/113404099228886304 https://mastodon.social/@pid_eins/113404099228886304 You auth the initrd too
- conradev 1y ago
  This is super cool, thanks for the link! I’m glad they were able to leverage the TPM