this post was submitted on 21 Jul 2023
932 points (100.0% liked)

Technology

37739 readers
730 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

The much maligned "Trusted Computing" idea requires that the party you are supposed to trust deserves to be trusted, and Google is DEFINITELY NOT worthy of being trusted, this is a naked power grab to destroy the open web for Google's ad profits no matter the consequences, this would put heavy surveillance in Google's hands, this would eliminate ad-blocking, this would break any and all accessibility features, this would obliterate any competing platform, this is very much opposed to what the web is.

you are viewing a single comment's thread
view the rest of the comments
[–] ech@lemm.ee 14 points 1 year ago (2 children)

you need a Microsoft signed stub to boot anything other than Windows on a PC

Can you expand on this? Maybe I'm just misunderstanding you, but a "pc" is not a Windows made machine. It is a collection of disparate computer parts made by different companies with no requirement to run Windows as the exclusive OS once put together.

Even on a Windows OS, I can run any program I want (that's made to operate with Windows). I may get a warning if it's not a "known" developer, but I can still run it. Did I miss a big update to how 11 works with unknown software or something?

[–] jarfil@beehaw.org 16 points 1 year ago* (last edited 1 year ago) (4 children)

PCs have been switching to UEFI instead of legacy BIOS startups, one of the features of UEFI is Secure Boot, which ensures all code being run during the boot process is signed with a valid key, which most PC manufacturers have been choosing to be a Microsoft key by default because Windows requires Secure Boot and most PC users want to run Windows. Depending on the manufacturer, you may be able to switch to "legacy BIOS" boot, add your own keys, disable the check, or use a Microsoft signed stub for your alternative OS. Only the last one is guaranteed to work, though.

Even on a Windows OS, I can run any program I want

Windows 10/11 Home in S mode only allows running programs from the Microsoft Store, you need to upgrade the license if you want to "sideload" stuff.

[–] argv_minus_one@beehaw.org 6 points 1 year ago

I have yet to encounter a PC where Secure Boot can't be turned off.

[–] Sproux@lemmy.dbzer0.com 5 points 1 year ago

If i recall you can toggle s mode off inside the Microsoft store and use it normally, you just cant turn it back on without a reboot.

[–] ech@lemm.ee 5 points 1 year ago

Interesting. I wasn't aware of all that. Troublesome.

[–] riquisimo@lemmy.dbzer0.com 1 points 1 year ago

S mode?? Man that feels like using a PC with a child lock turned on.

[–] Zeth0s@reddthat.com 7 points 1 year ago* (last edited 1 year ago)

I believe he is talking about secure boot

https://wiki.debian.org/SecureBoot