mjg59

64 ms·

931.
by mjg59 5y ago
Where do you put the password? If you're just protecting the firmware setup, then I can just rewrite the secure boot key database without using the firmware setup. If you're using it for disk encryption, I just buy one myself, dum
932.
by mjg59 5y ago
We do that for convenience, so you can boot Linux without having to hunt through firmware menus to reconfigure them. But every machine /should/ let the user enroll their own keys[1], so users are free to shift to a different signi
933.
by mjg59 5y ago
You're not wrong, but unfortunately those of us on the side of free software aren't the ones driving most technology decisions. This technology already exists, and if people want to use it to lock us out of our own hardware, they
934.
by mjg59 5y ago
> worked with the community in #freenode-policy-feedback to understand the community's wishes. The community's wishes were largely not in favour of this change, and your last comment on this in #freenode-policy-feedback was tha
935.
by mjg59 5y ago
Freenode Ltd is a UK company. The EU GDPR no longer applies as a result of Brexit, but the EU GDPR requirements have separately been incorporated into UK law. I don't see any reason why it wouldn't apply.
936.
by mjg59 5y ago
Contemporary ARM Windows laptops adhere to well documented standards. Booting Linux isn't a major challenge.
937.
by mjg59 5y ago
Apple don't block access to their NVMe controllers at all. They do appear to have a, well, interesting approach to spec compliance, but Linux is now entirely capable of handling the SSD on all x86 Apple hardware. In the M1 case the NVM
938.
by mjg59 6y ago
As others have said, it's not speaking USB - it just happens to be the same shape. But it's probably not a coincidence that it's compatible with a USB socket. In this case the designer wanted a socket that had 4 pins and coul
939.
by mjg59 6y ago
Ok. It should make literally zero difference in that case. What problems do you see without it, and could you mail me dmesg for both cases? (mjgarrett59@googlemail.com)
940.
by mjg59 6y ago
Which kernel version are you running? That string was added in 5.4.
941.
by mjg59 6y ago
What argument are you providing? In some cases if you pretend to be an older version of Windows then things will work better, since it's possible for the kernel to end up pretending to be a new version of Windows without all the releva
942.
by mjg59 6y ago
As mentioned by AnssiH, this hasn't been true for a long time - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... was merged in 2007. I wrote up the reasoning back in 2008 at
943.
by mjg59 6y ago
What was notable in this case was that Google disclosed this issue to Intel, and Intel then took responsibility for public disclosure. Intel then proceeded to mail patches to public trees without flagging them as having any security relevan
944.
by mjg59 6y ago
Reminder that a blanket statement that RMS is autistic is contradicted by RMS himself: https://www.computerworld.com/article/2551458/asperger-s-oxy...
945.
by mjg59 6y ago
What's the correct response to people that discourage people from using tools that don't restrict a person's freedom?
946.
by mjg59 6y ago
Who or what is harmed in this case if not the children?
947.
by mjg59 6y ago
And if you can't make a coherent argument on that point, maybe you should apologise for suggesting that JohnHaugeland was "willfully, blatantly lying"?
948.
by mjg59 6y ago
"I am skeptical of the claim that voluntarily pedophilia harms children" - if it's not harming children, who or what is it harming?
949.
by mjg59 6y ago
Under what circumstances is something that does no harm not ok?
950.
by mjg59 6y ago
Any writeup of this that concentrates on external responses and ignores the strong response from many within the communities that RMS led is failing to tell the complete story. There's no shortage of people extremely familiar with his
951.
by mjg59 6y ago
> The context is the one of the accusation of Marvin Minsky, in a case involving Epstein No, the context is the totality of RMS's behaviour over the years, as was made clear by a parent comment: "A few final statements did brin
952.
by mjg59 6y ago
Sure! The response to someone who is deliberately offensive and someone who habitually offends people by accident should be different, and I don't think anyone denies that. But that's not an argument for doing nothing in respons
953.
by mjg59 6y ago
I don't think it's unreasonable to interpret "I am skeptical of the claim that voluntarily pedophilia harms children" as a suggestion that there are circumstances under which paedophilia is OK. Suggesting that someone do
954.
by mjg59 6y ago
These are all different things, but the end result is that someone has been hit with a car. If your goal is to avoid people being hit with cars and someone keeps accidentally hitting people with their car, then you probably want to consider
955.
by mjg59 6y ago
This is probably a reference to https://stallman.org/archives/2006-mar-jun.html : "I am skeptical of the claim that voluntarily pedophilia harms children. The arguments that it causes harm seem to be based on cases
956.
by mjg59 6y ago
https://mjg59.dreamwidth.org/55845.html
957.
by mjg59 6y ago
> So one could guess the CPU is in such state before the operating system gets loaded. That would be an incorrect guess. Getting into this mode requires the cooperation of the ME. If you're Intel then that means you use parts with d
958.
by mjg59 6y ago
No. me_cleaner reduces the amount of code running on your ME, and as such reduces the attack surface presented by the ME. But anyone with physical access (which is required for the interestingly exploitable ME vulnerabilities) is in a posit
959.
by mjg59 6y ago
Situation without this CPU feature: Cops compromise the ME, disable Boot Guard, compromise your firmware, backdoor your OS directly Situation with this CPU feature: Cops compromise the ME, disable Boot Guard, compromise your firmware, backd
960.
by mjg59 6y ago
The assumption on Intel is that there are no barriers once you're in the ME. You can't defend against a hostile ME. The security model is already violated. Maybe there should be a barrier between the ME and the CPU, but as can

More ›