369
Microsoft officially recommends a new PC and OneDrive to update to Windows 11 (www.neowin.net)
submitted 2 years ago by to c/technology@lemmy.world
153 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (6 children)

It's not for you, it's for them. Secure boot means it only runs their operating system, not yours. Trusted enclave means it secures their DRM-ware from tampering by the user who owns the PC.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 15 points 2 years ago (3 children)

    Secure boot means that only the intended bootloader runs, it can be any one, but it just needs to be the intended one.

    Secure boot works with Linux.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 2 years ago (2 children)

    It works for now on x86-64, yes. For now. As always, we are one "think of the children" crisis away from lobbyists taking that option away.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 2 years ago (1 child)

    What? I think you maybe just don't know what purpose secure boot serves.

    It's not a tool to vendor lock computers, it's a tool to establish a chain of trust to protect the boot process by only allowing cryptographically signed images from executing. Anyone can sign things for secure boot by simply creating an x509 certificate and importing it. If vendors wanted to prevent you from running a different operating system, they would just lock it down completely as is done in many devices like mobile phones and proprietary electronics.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •