Garrett: Don't like Secure Boot? Don't buy a Chromebook

Posted Feb 7, 2013 4:10 UTC (Thu) by paulj (subscriber, #341)
In reply to: Garrett: Don't like Secure Boot? Don't buy a Chromebook by raven667
Parent article: Garrett: Don't like Secure Boot? Don't buy a Chromebook

So the justification for SecureBoot is security, but arguments about the security of the system are out of scope in considering the case SecureBoot?

Garrett: Don't like Secure Boot? Don't buy a Chromebook

Posted Feb 7, 2013 15:18 UTC (Thu) by raven667 (subscriber, #5198) [Link]

The security of the whole system is a wide ranging topic covering application security, kernel security, etc. SecureBoot only has an effect on the UEFI firmware and bootloader code, it doesn't even extend to the kernel, and it only help prevent replacing or modifying the firmware and bootloader without the admin's permission. All other system security is out of scope. What you do with the small advantage that being able to trust the bootloader is the same bits and bytes that it's supposed to be, is up to the implementor.