style="font-family: -moz-fixed; font-size: 12px;" lang="x-unicode">
On Fri, Mar 27, 2015 at 12:26 PM, Ruben <ruben.safir-at-my.liu.edu> wrote:
The permutations now with UEFI is broad. It is really a big PIA. You
just keep hoping it goes away, but it doesn't because it is backed by
industrial consortium(s) who hate your access to systems. It solves
NOTHING. All the key parts of it that needed to be solved were solved
with gpart.
Boot kits are a real problem, and Secure Boot does solve that problem.
The new problem is the firmware itself is vulnerable, and the drive's
firmware is vulnerable. And one of the solutions for this is Intel
Boot Guard, which comes with its own pile of concerns.
http://mjg59.dreamwidth.org/33981.html
I think a much bigger part of the problem is this is still the dark
ages of computer security, more so than companies who hate user access
to systems. They're basically using hammers to fix problems that
require the development of scalpels. There's no guarantee that will
happen, so it's appropriate to remain skeptical and critical, but I
wouldn't default to assuming all companies want to sabotage you
either.
I mean, ultimately that Intel or AMD or ARM CPU in your computer, and
the board its on, is proprietary hardware. And if you don't trust the
hardware, well then all bets are off anyway.
Distros approaches to solving the multiple hurdles is indeed different
for each one. You can write a book on this topic and it does not go
away with a wave of the hand.... it doesn't.
Yep you're right. It's just annoying.
--
Chris Murphy
