There's this mantra: "Anitvirus is dead". Unsigned shit will ruin your day. It's creating sadness every day. Blindly booting any old garbage, happily taking any

There's this mantra: "Anitvirus is dead". Unsigned shit will ruin your day. It's creating sadness every day. Blindly booting any old garbage, happily taking any old firmware update, executing whatever has an execute bit set is what is broken about computer security today. Your computer's TPM is actually completely customizable. By taking ownership of mine I presume I can no longer boot the Win8 image that shipped with it, but I see now it's a very useful tool. I also started off in the anti-DRM, anti-Microsoft crowd with a deep distrust for this technology, but I think these days it actually is seeing useful application in enterprise security. Things like Intel's TXT and AMD's SVM are definitely on the right trajectory. Having said all that, I dislike systemd. They still don't support keyscript in crypttab, from what I can glean of Lennart's comments on this it's because custom scripting seems to be an abhorrent concept among systemd developers. This strikes me as the wrong culture to have for such a critical piece of infrastructure in our ecosystem.