3 ms·

SecureBoot implies that firmware installed by running OS must be signed too.

• Someone 13y ago
  That may not work if your Secureboot implementation is buggy. The '80s solution to this problem was way easier, and it worked: a switch on the motherboard required physical access to the machine to flash its firmware.
  • alextingle 13y ago
    Physical switches are expensive.
    • nitrogen 13y ago
      Jumpers are not expensive. You've already got dozens of the same kind of pin inside of every classic IDE and floppy connector on a motherboard.