Bonum Certa Men Certa

How Secure Boot Could Have Ruined My First Linux Experience And Why IBM Is Making Things Worse.

Reprinted with permission from Ryan Farmer. Also available in Gemini

Historically, using Free and Open Source Software has been a “license to tinker”, and Linux was no exception.



If it didn’t do something you needed it to do, you could patch it with “something I found”.



If that hadn’t been the case, I would have never been able to start using Mandrake Linux in the 1990s.



You see, the family computer had this horrible piece of hardware in it called a “Winmodem”. And let me tell you about those.



Pretty much as the name implies, the manufacturer dropped a Windows driver, which essentially was the modem.



Theoretically, this had benefits, like the modem could be updated by simply installing a new driver, since most of the logic for the thing is in the software, which runs on the computer, in the Windows 98 kernel in my case.



But that benefit hardly ever materialized. If any manufacturer actually sold you a modem and then later updated you to v.90 or v.92 or something, I’m not aware of it.



They left me at K56Flex and x2, two competing specifications written by rival companies, that predated the ITU standard for v.90 and v.92 56k dial up modems.



Fortunately, most ISPs supported one, the other, or both, in which case it would go ahead and work, but the modem itself was STILL a problem.



Because you only had the Windows driver, and because it implemented the entire modem, without Windows, the modem did nothing. You had no Internet access at all. Dead hardware.



Fortunately, I found the source code to a module that I could compile and add to Linux, and it made the modem work well enough, that I could at least get by until I had saved enough to buy a Zoom 56k modem that supported the actual ITU standards.



The Winmodem was a parasite. Even under Windows, the damn thing made the entire system hang whenever it picked up or hung up the phone line, and then while it was running, it stole CPU time for the driver.



So, this is basically my “Richard Stallman and the Printer” story.



Eventually I was able to remove the Winmodem and the (somewhat unstable) out-of-tree driver, but when I needed to patch the kernel, nothing stopped me. Nothing could have stopped me because nobody had lost their mind and thought Microsoft was a security company.



We didn’t have these ridiculous “Security” charades by the purveyor of the least secure software on the planet.



(“Secure” Boot offers no advantages and the GNOME Desktop has even been tarred and feathered by a “Security” Theater screen by people at IBM Red Hat…… I use KDE now.)



While it is much less common now to encounter the need to run unsigned modules, everyone should be allowed to, without Microsoft in their way. Or in the way of even booting the computer.



Unfortunately with IBM Red Hat’s assistance, crazier things than “Secure” Boot are happening.



This includes the outlandish notion that most of the file system should be read-only (“immutable”) and shouldn’t be within the user’s reach because Apple does this with a toy OS.



How is the user supposed to edit flat configuration files to make systemd (their other disaster) behave differently? How is the user supposed to take software they want in /opt and put it in /opt?



I don’t think you can. And the “Transactional Upgrade” system sounds horrible.



An “everything or nothing” upgrade of every package on the system, even if some are broken, and the only thing you can do if some are is roll the entire thing back?



I will never install a distribution with an immutable file system.



These distributions are worse than useless.



Even IBM Fedora, which has been banging this drum the loudest, has had an immutable “spin” forever, says they’ll make it “Workstation” someday, and well, that hasn’t happened.



There’s just no way to make it actually work. Not if you want to configure the system at all, or do something like dnf update –security.



Don’t even get me started on “kernel lockdown”, where even root is somehow not allowed to change kernel variables.



If a user has so seriously misconfigured their system that a vulnerability exists, let them live with that.



But this really has nothing to do with Security. It’s about walling the user off from their own computer to enforce Windows, or at the very least, make Digital Restrictions Malware (DRM) more effective on Linux.



Quit screwing up my laptop.

Recent Techrights' Posts

The Ludicrous Mythology of Commonality as Signal of Value, Merit, Popularity
Devalue what's true, promote marketing?
[Video] Richard Stallman on the Four Essential Freedoms (Manuel Cuda News, 2025)
Added to a channel several days ago by Manuel Cuda News
[Video] Richard Stallman on Understanding the Misconception of So-called 'Artificial Intelligence'
to "know and understand"
Gemini Links 09/03/2025: Lagrange 1.18.5 and Writing Mannerisms
Links for the day
Links 08/03/2025: International Women's Day, Software Patents Being Squashed
Links for the day
 
Links 10/03/2025: Small Web Praised, LLM Chatbots Exposed as Worse Than Useless Again
Links for the day
A Call for GNU/Linux and BSD Developers to Unite Against GAFAM and the Regime They Empower
We have long encouraged and continue to encourage people who value Software Freedom to altogether boycott GAFAM
Gemini Links 10/03/2025: Realisation About Young People, Punks, and Discord IPO
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, March 09, 2025
IRC logs for Sunday, March 09, 2025
FSF's Defective by Design (DBD): Amazon Tightens the Digital Handcuffs
Reproduced verbatim
The Fall of the Open Source Initiative (OSI): Plenty of Issues, Plenty of Censorship
The OSI is abusive on many levels!
EPO Staff Appraisals Apparently Benefit Kakistocracy, Including Cheaters Who Grant Illegal Patents and Punish Good Patent Examiners (Who Find Valid Reasons for Denials)
In prior reports the staff representatives said that rewards typically went to people who granted many patents, i.e. didn't do proper examination and instead just allowed many fake patents get enshrined as EPs, causing fiasco (from which some patent attorneys could profit)
As The Web Gets Drowned Out, Sinking in a Pool of LLM Slop, Real News Sites With Real News Become Increasingly Rare If Not Extinct
This is a real problem
Links 09/03/2025: Moderna Patents Thrown Out, Climate United Sues E.P.A.
Links for the day
Links 09/03/2025: FiveThirtyEight Killed by Disney, Nature (Journal) Chooses Suicide by Slop
Links for the day
Hiding Problems Doesn't Work
transparent organisations will be more stable and sustainable
The Harder They Try to Censor, the Bigger the Scandal (and the Impact) Will Be
We don't plan to self-censor our coverage; sometimes we just delay publication a little
Gemini Links 09/03/2025: Leasehold Derangement Syndrome, Raspberry Pi, and More
Links for the day
All-Time Low for Microsoft in Africa
it helps show how irrelevant Microsoft is becoming
French woman (frontaliere) trafficked to promote unauthorised cross border Swiss insurance
Reprinted with permission from Daniel Pocock
New York Times & Guardian reporting on Modern Slavery Act prosecution of Glodi Wabelua
Reprinted with permission from Daniel Pocock
Diana & Adrian von Bidder-Senn, EVP, Palm Sunday & Debian death on wedding day
Reprinted with permission from Daniel Pocock
The RTO (Return-to-office) Layoffs or 'Soft' Layoffs at IBM and Red Hat
There are certainly many layoffs going on there, but many are described as "resignations" or "retirements" after RTO or some other form of relocation
Under the Pen Name "John O'Donnell" (LLM Slop, Not Real Article or Author) LinuxLinks Pushes Spammy Page
it happened some hours ago.
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, March 08, 2025
IRC logs for Saturday, March 08, 2025
Graveyard of Mastodons: A Vast Number of Inactive Accounts
More than 80% of users in mastodon.social (the "big one") are no longer active
Gemini Links 08/03/2025: Reading Cory Doctorow's 'Little Brother', Abandoning GAFAM Forever
Links for the day
No, We Don't Want to Go "Viral" (and You Probably Don't, Either)
"Viral" junk gets forgotten quickly
Windows is Being Eradicated
On the Web, in Africa in particular, user strings or UAs that say "Windows" are becoming more rare
For International Women's Rights Day (Today) Staff Representatives at the European Patent Office (EPO) Opened Up on Gender Discrimination at the Office
Office discrimination against women is widely known; unless you sleep with men in management
Links 08/03/2025: Tariff Self Harm and Mostly Solved Diseases Making a Comeback
Links for the day
Links 08/03/2025: Climate Change Causing Food Shortages, Selling Off Chrome Still in the Cards
Links for the day
Gemini Links 08/03/2025: Driving in Japan, GrapheneOS, Tariffs Silver Lining
Links for the day
Working Like a Pack of Hyenas, the Microsofters Try Hard to Hide the Truth and Actively Censor Critics
They even target women
The Fall of the Open Source Initiative (OSI): Bylaws of the OSI a Shocking Oversight
That's what the OSI is right now: a salesperson
Thinking About Abandoning 'Google News' Altogether Due to Easy Poisoning by LLM Slop
As long as Google News keeps sending traffic to these leeches, it'll be very hard to justify relying on Google News for anything at all
Links 08/03/2025: Microsoft Failures, Further Attacks on Speech in Hong Kong
Links for the day
Gemini Links 08/03/2025: Physical Albums, Analog Computing, Deleting All Social Control Media
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, March 07, 2025
IRC logs for Friday, March 07, 2025