40
submitted 3 months ago by BrikoX@lemmy.zip to c/technology@lemmy.zip

PCs without the new certificates could eventually have trouble booting new OSes.

you are viewing a single comment's thread
view the rest of the comments
[-] Hirom@beehaw.org 5 points 3 months ago* (last edited 3 months ago)

Would Linux have the same issue if secure boot is enabled and the certificate expire?

Secure boot is a useful security measure. But users should have the ability to install and update certs. If hardware (vendors) don't allow this, it's going to cause trouble for both Windows and Linux users.

[-] h_ramus@piefed.social 1 points 3 months ago

Gives the illusion of security without being secure. Get the drive in a separate machine and, unless encrypted, secure boot is security theatre. Windows login password is similarly useless when the drive can be accessed when attached elsewhere.

Get rid of secure boot, install a granny-safe Linux distribution like Mint and get your drive LUKS encrypted.

[-] Hirom@beehaw.org 5 points 3 months ago

You're talking of an attacker with physical access. This can indeed defeats secure boot, but physical access defeat most computer security. In an evil maid scenario even LUKS can be defeated. An attacker with physical access can clone the drive, install a keylogger (hardware or software) and capture the passphrase the next time the machine boots.

Secure Boot can be useful to prevent malware from inserting themselves into the boot process, preventing them from elevating privilege or gaining persistence https://www.xda-developers.com/secure-boot/

Secure Boot isn't perfect but it's widely available and is an useful extra layer of protection, on top of disk encryption (eg LUKS).

[-] h_ramus@piefed.social -1 points 3 months ago

I can't take any Microsoft attempt at security seriously. One of the most important elements to improve security is to delete windows. Secure boot is lots of things but not secure.

[-] FreedomAdvocate@lemmy.net.au 1 points 3 months ago* (last edited 3 months ago)

These are all basically “if your machine is already compromised, they can also get around these other security measures” type exploits though, which are irrelevant.

[-] FreedomAdvocate@lemmy.net.au 1 points 3 months ago* (last edited 3 months ago)

Good thing windows encrypts your disk too.

Also if someone has physical access to your machine to do nefarious things tor you’re already fucked.

[-] FatVegan@leminal.space 1 points 3 months ago

But how are you gonna play High Guard???

this post was submitted on 11 Feb 2026
40 points (100.0% liked)

Technology

6761 readers
322 users here now

News community around technology, social media platforms, information technology and governmental policy surrounding it.

What doesn't fit here?

The core of the story has to be technology focused.


Post guidelines

Title formatPost title should mirror the news source title. If you don't like the title of article, look for an alternative source instead of editorializing it.
URL formatPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
[Opinion] prefixOpinion (op-ed) articles must use [Opinion] prefix before the title. Opinion articles refer to articles that their publisher doesn't explictly endorse.
Country prefixCountry prefix can be added to the title with a separator (|, :, etc.) if the news is from a local publisher who doesn't clearly mention the country.


Rules

1. English onlyTitle and associated content has to be in English.
2. Use original linkPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
3. Respectful communicationAll communication has to be respectful of differing opinions, viewpoints, and experiences.
4. InclusivityEveryone is welcome here regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
5. Ad hominem attacksAny kind of personal attacks are expressly forbidden. If you can't argue your position without attacking a person's character, you already lost the argument.
6. Off-topic tangentsStay on topic. Keep it relevant.
7. Instance rules may applyIf something is not covered by community rules, but are against lemmy.zip instance rules, they will be enforced.


Companion communities

!globalnews@lemmy.zip
!interestingshare@lemmy.zip


Icon attribution | Banner attribution


If someone is interested in moderating this community, message @brikox@lemmy.zip.

founded 2 years ago
MODERATORS