| |||||||||||||
Turn off "secure" bootTurn off "secure" bootPosted Jun 28, 2012 16:32 UTC (Thu) by wookey (subscriber, #5501)In reply to: Turn off "secure" boot by rwmj Parent article: Ubuntu details its UEFI secure boot plans
Quite. It seems like a really good reason not to buy an ARM device with Windows 8 on.
And is there a real practical problem that all this faffing about with keys solves? It seems to me that pre-boot infections are a very rare thing, and this cure it a lot worse than the disease. Perhaps I am wrong about that?
Secure boot could be useful in the same way that encrypting your machines disk, but only if _you_ have control. I remain doubtful that manufacturers are going to provide that control, and that could start to be a serious problem when buying new kit. We all resented the 'microsoft tax' on much PC and laptop x86 hardware to date, but you did at least get control of the hardware once it was in your hands. We seem to be heading for a world where that may no longer be true.
Buy carefully!
(Log in to post comments)
Turn off "secure" boot Posted Jun 28, 2012 19:29 UTC (Thu) by mjg59 (subscriber, #23239) [Link]
> It seems to me that pre-boot infections are a very rare thing, and this cure it a lot worse than the disease. Perhaps I am wrong about that?
Yes.
Turn off "secure" boot Posted Jun 28, 2012 19:39 UTC (Thu) by mjg59 (subscriber, #23239) [Link]
That is to say, yes, you're wrong about it being very rare - attacks on the boot process are becoming more common. Whether the cure is worse is more of a value judgement.
Turn off "secure" boot Posted Jun 28, 2012 21:45 UTC (Thu) by wookey (subscriber, #5501) [Link]
Some evidence would help convince. Is this something that only affects Windows people which is why I've never heard of a case?
Turn off "secure" boot Posted Jun 28, 2012 21:47 UTC (Thu) by mjg59 (subscriber, #23239) [Link]
Improvements in Windows security have meant that the boot process is an easier target. http://www.slideshare.net/daniel_bilar/matrosov-2012-reco... is a description of this in the real world, but there are several others out there.
|
|||||||||||||