6 ms·
If someone can just turn off secure boot, how does secure boot increase security? Isn't the whole point of it that you can't boot a compromised machine?
by windsurfer 14y ago
If someone can just turn off secure boot, how does secure boot increase security? Isn't the whole point of it that you can't boot a compromised machine?
- etherealG 14y agonope, the point is that the machine won't boot a compromised OS without the user knowing. the scenario is that the bootloader is compromised by some process other than the user turning it off. we're not trying to protect computers from the people that own them. security isn't about stopping people from having full control of their devices, it's about stopping processes from having control that the owners don't allow.
- jebblue 14y ago>> it's about stopping processes from having control that the owners don't allow That's why I run Linux in the first place.
- recoiledsnake 14y agoTo be certified for Windows 8, the device needs to support UEFI secure boot and allow a _physically present user_ to turn it off(typically in order to boot other OSes). It does reduce security a bit, but enhances user freedom a lot.
- laumars 14y ago> It does reduce security a bit, but enhances user freedom a lot. "enhances" or "reduces" user freedom. There's nothing about secure boot that enhances freedom.
- recoiledsnake 14y agoI was referring to the setting to turn Secure Boot off there, not Secure Boot itself.