Hacker News Reader

Bought a desktop recently. Thought about setting up verified boot and disk encryption, but...

[M]y biggest takeaway was that all of this was quite complicated and did not really have anything to do with what I bought this system for. So I decided to throw in the towel and flip SecureBoot off.

(See last section here, on trust): https://cameronnemo.gitlab.io/posts/lagomorpha/

View on HN

SecureBoot was as much an attempt by Microsoft to put in place a method to lock out other OSes as it was for local physical security. Most consumer desktop and laptop computer users don't password protect their BIOS/EFI, so an attacker with physical access can simply turn off SecureBoot themselves and then boot whatever toolkit they want to take over the system.

Reply on news.ycombinator.com