• ferret
      link
      fedilink
      English
      326 months ago

      If you have secure boot off OR don’t have a bios password you are just as insecure as this “vulnerability” would make you

        • ferret
          link
          fedilink
          English
          46 months ago

          So don’t use it? How much or how little actual security secure boot provides is a topic that has been discussed to oblivion. I brought it up to make a point of how badly people are overreacting about the severity of this latest framework news.

          • FoundFootFootage78
            link
            fedilink
            English
            2
            edit-2
            6 months ago

            I still have no idea what secure-boot really does and this was me turning the metaphorical secure-boot dial while checking the crowd to see whether they start gasping in horror.

            • WFH
              link
              fedilink
              46 months ago

              I believe it only means “I paid Microsoft to get a certificate”, so it does absolutely nothing for security.

      • floquant
        link
        fedilink
        86 months ago

        A legitimate backdoor is still a backdoor. If you have security measures and a way to bypass them, you don’t have security measures.

        • @toothbrush@lemmy.blahaj.zone
          link
          fedilink
          16
          edit-2
          6 months ago

          Its not a backdoor, because secure boot was never about safety to begin with. Its just a piece of security theater, whose primary use is more control for microsoft. “Secure” boot only boots software signed with a microsoft key, thats the “security”. Microsoft also allows linux distributions to be signed, but nothing is technically stopping them from just refusing, for " security reasons", and on some systems secure boot cant be turned off. So it being bustable is a good thing. There are other ways to protect devices from physical access, but generally, if attackers have physical access to your computer, then its compromised, secure boot or not. Framework just didnt want to play along.

          • @Auli@lemmy.ca
            link
            fedilink
            English
            36 months ago

            Can’t you add your own signing key or the distro can. I know you can remove the existing keys.

        • @unwarlikeExtortion@lemmy.ml
          link
          fedilink
          46 months ago

          But a “backdoor” which is swung wide open if you don’t secure it isn’t really a backdoor. It’s more akin to an open window.

      • juipeltje
        link
        fedilink
        126 months ago

        I think he’s referring to framework financially supporting omarchy and hyprland.

      • rozodru
        link
        fedilink
        English
        96 months ago

        they sponsored Omarchy and Hyprland. one a glorified dotfiles arch “distro” built by DHH who is pretty much a fascist and Hyprland a buggy neon mess of a WM built by a transphobic fascist.

        So yeah, they’re not having a good time right now.

        • @bigmamoth@lemmy.world
          link
          fedilink
          -46 months ago

          ??? It s software? How it s facist or transphobic of whatever. If tomorrow linus start doing bad stuff I won’t say don’t use Linux???

          • rozodru
            link
            fedilink
            English
            46 months ago

            because they’re built by individuals who are those things. that’s the controversy. that’s it.

            the whole thing is people are upset that Framework sponsored those things because they don’t like paying Framework for their machines who in turn then give money to people they feel are facists.

            • @bigmamoth@lemmy.world
              link
              fedilink
              06 months ago

              To me they give to a project that have individual that hold controversial opinion rather than to a controversial individual but I can understand the logic.

              But tbh I would rather be pissed that a company would finnanve other while they sell their stuff for a premium price

              • curbstickle
                link
                fedilink
                English
                46 months ago

                If the individual is the only one in charge of the project, and controls the money, there really isnt a difference.