On Sat, Dec 1, 2012 at 8:34 PM, Stefan Monnier <[email protected]>wrote:
> > Anybody know does every vendor have a bios switch to turn secure booting > > off? It isn't like the manufacturers are going to advertise that... > > Ask the vendor and make it clear you won't buy anything unless the > vendor can confirm that the secure-bios crap can be turned off. > > It's really important to send the message that it's a real problem that > some of their customers care about. > But is it really? On the contrary, I think it's a nice idea that can improve the security of systems and avoid boot-sequence exploits. I'll agree though that it's badly executed and it shouldn't be up to Microsoft to maintain the signing key -- on the contrary, it should be done by an independent entity that isn't tied to the operating systems vendors... the problem with it is, people don't care enough to do it. That said, more than half the people you'll ask about Secure Boot in brick-and-mortal stores or on online stores won't be able to answer you on whether it can be disabled. Again, probably because they don't care. Your best bet might be to make use of guarantees to be able to return the system if it doesn't do what you want. Or ask for *what BIOS* a particular machine is running, because that can be found out from looking at component boxes, stickers, etc.; then do your own research on $searchengine. Mathieu Trudel-Lapierre <[email protected]> Freenode: cyphermox, Jabber: [email protected] 4096R/EE018C93 1967 8F7D 03A1 8F38 732E FF82 C126 33E1 EE01 8C93
_______________________________________________ mlug mailing list [email protected] https://listes.koumbit.net/cgi-bin/mailman/listinfo/mlug-listserv.mlug.ca
