3 ms·

I don't understand why do you think that having the option to have secure boot and a good, trustworthy sandbox for processes implies you cant run Linux on a VM

I don't understand why do you think that having the option to have secure boot and a good, trustworthy sandbox for processes implies you cant run Linux on a VM or Linux beside Windows etc. People always freak out when I mention secure boot, and the funniest response usually are the ones who threaten to abandon Windows for macOS (which has had secure boot for more than a decade by default) I'm not super technically knowledgeable about secure boot, but as far as I understand, you need to have a kernel signed by a trusted CA, which sucks if you want to compile your own, but is a hurdle generally managed by your distro, if you're willing to use their kernel. But if all else fails you can always disable secure boot.

15155 7mo ago
Secure Boot cuts both ways. The techniques anti-cheat software are allowed to use on Windows machines aren't even remotely allowed on macOS machines.
LtWorf 7mo ago
> But if all else fails you can always disable secure boot. for now
rl3 7mo ago
>I don't understand why do you think that having the option to have secure boot and a good, trustworthy sandbox for processes implies you cant run Linux on a VM or Linux beside Windows etc. I'm a big secure boot fan. The fact that it's becoming increasingly common for games to require it is the stupid part. Said games tend to want that root of trust to be known OEM keys, not custom keys. At that point they're dictating the operating system and hardware you can use, and that's where that approach becomes garbage. Hardware attestation should not be a requirement nor concern for games, period.
DannyWebbie 7mo ago
Afaik Vanguard (Anticheat of League of Legends, Valorant, other Riot Games titles) requires secure boot. This is pretty quickly getting to where mobile phones are today when it comes to disadvantages of opting out of trusted computing.

15155 7mo ago

Secure Boot cuts both ways. The techniques anti-cheat software are allowed to use on Windows machines aren't even remotely allowed on macOS machines.

LtWorf 7mo ago

> But if all else fails you can always disable secure boot. for now

rl3 7mo ago

>I don't understand why do you think that having the option to have secure boot and a good, trustworthy sandbox for processes implies you cant run Linux on a VM or Linux beside Windows etc. I'm a big secure boot fan. The fact that it's becoming increasingly common for games to require it is the stupid part. Said games tend to want that root of trust to be known OEM keys, not custom keys. At that point they're dictating the operating system and hardware you can use, and that's where that approach becomes garbage. Hardware attestation should not be a requirement nor concern for games, period.

DannyWebbie 7mo ago

Afaik Vanguard (Anticheat of League of Legends, Valorant, other Riot Games titles) requires secure boot. This is pretty quickly getting to where mobile phones are today when it comes to disadvantages of opting out of trusted computing.