Bonum Certa Men Certa

How Secure Boot Could Have Ruined My First Linux Experience And Why IBM Is Making Things Worse.

Reprinted with permission from Ryan Farmer. Also available in Gemini

Historically, using Free and Open Source Software has been a “license to tinker”, and Linux was no exception.



If it didn’t do something you needed it to do, you could patch it with “something I found”.



If that hadn’t been the case, I would have never been able to start using Mandrake Linux in the 1990s.



You see, the family computer had this horrible piece of hardware in it called a “Winmodem”. And let me tell you about those.



Pretty much as the name implies, the manufacturer dropped a Windows driver, which essentially was the modem.



Theoretically, this had benefits, like the modem could be updated by simply installing a new driver, since most of the logic for the thing is in the software, which runs on the computer, in the Windows 98 kernel in my case.



But that benefit hardly ever materialized. If any manufacturer actually sold you a modem and then later updated you to v.90 or v.92 or something, I’m not aware of it.



They left me at K56Flex and x2, two competing specifications written by rival companies, that predated the ITU standard for v.90 and v.92 56k dial up modems.



Fortunately, most ISPs supported one, the other, or both, in which case it would go ahead and work, but the modem itself was STILL a problem.



Because you only had the Windows driver, and because it implemented the entire modem, without Windows, the modem did nothing. You had no Internet access at all. Dead hardware.



Fortunately, I found the source code to a module that I could compile and add to Linux, and it made the modem work well enough, that I could at least get by until I had saved enough to buy a Zoom 56k modem that supported the actual ITU standards.



The Winmodem was a parasite. Even under Windows, the damn thing made the entire system hang whenever it picked up or hung up the phone line, and then while it was running, it stole CPU time for the driver.



So, this is basically my “Richard Stallman and the Printer” story.



Eventually I was able to remove the Winmodem and the (somewhat unstable) out-of-tree driver, but when I needed to patch the kernel, nothing stopped me. Nothing could have stopped me because nobody had lost their mind and thought Microsoft was a security company.



We didn’t have these ridiculous “Security” charades by the purveyor of the least secure software on the planet.



(“Secure” Boot offers no advantages and the GNOME Desktop has even been tarred and feathered by a “Security” Theater screen by people at IBM Red Hat…… I use KDE now.)



While it is much less common now to encounter the need to run unsigned modules, everyone should be allowed to, without Microsoft in their way. Or in the way of even booting the computer.



Unfortunately with IBM Red Hat’s assistance, crazier things than “Secure” Boot are happening.



This includes the outlandish notion that most of the file system should be read-only (“immutable”) and shouldn’t be within the user’s reach because Apple does this with a toy OS.



How is the user supposed to edit flat configuration files to make systemd (their other disaster) behave differently? How is the user supposed to take software they want in /opt and put it in /opt?



I don’t think you can. And the “Transactional Upgrade” system sounds horrible.



An “everything or nothing” upgrade of every package on the system, even if some are broken, and the only thing you can do if some are is roll the entire thing back?



I will never install a distribution with an immutable file system.



These distributions are worse than useless.



Even IBM Fedora, which has been banging this drum the loudest, has had an immutable “spin” forever, says they’ll make it “Workstation” someday, and well, that hasn’t happened.



There’s just no way to make it actually work. Not if you want to configure the system at all, or do something like dnf update –security.



Don’t even get me started on “kernel lockdown”, where even root is somehow not allowed to change kernel variables.



If a user has so seriously misconfigured their system that a vulnerability exists, let them live with that.



But this really has nothing to do with Security. It’s about walling the user off from their own computer to enforce Windows, or at the very least, make Digital Restrictions Malware (DRM) more effective on Linux.



Quit screwing up my laptop. ⬆

Recent Techrights' Posts

Reuters is Becoming Slop, Not a News Agency (Treat Reports From Reuters Sceptically)
In their own words
Disclosure/s Crisis at The Register MS (Promoting a Ponzi Scheme for Money)
So now they sell several schemes/scams at the same time, not limited to the slop
Links 21/10/2026: "The Tragic Death of the Republican Party" and "No War But Data Center War"
Links for the day
Internet Relay Chat Still Growing
The numbers go up, not down [...] Don't believe the doomers
Intercontinental Brigading - Part X - American Back Doors Inside Our Computers, With Transatlantic Swatting Against Critics Thrown 'Into the Mix'
"If your Windows PC's Secure Boot certificates are out of date, your system is vulnerable to malware like rootkits."
Gemini Links 21/10/2026: A Walk Through Amsterdam and Pythagorean Theorem
Links for the day
More Mass Layoffs at Microsoft Weeks From Now, Then Again Months From Now
Microsoft's crisis is not limited to XBox
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, October 20, 2026
IRC logs for Tuesday, October 20, 2026
Gemini Links 20/10/2026: The Brothers Who Fought Mussolini and a Dying Main Laptop
Links for the day
Brett Wilson LLP Has Almost Zero Litigation Clients This Year (in the Area They Specialise in)
The silence on the financial front, combined with the lack of new clients, is deafening
Where to Celebrate the 20-Year Anniversary
let us know in IRC
Cheapening of the Workforce at IBM and Microsoft, Typically Without Even Announcing Any Layoffs
from leadership to compelled "retirement"
Help Us Improve Techrights
The site relies on teamwork in a growing community; even readers are part of it
Links 20/10/2026: $100 Million ICE “Intelligence” Program and France Riots
Links for the day
Gemini Links 20/10/2026: GAFAM GCP Outage in the UK and New Oddμ Release
Links for the day
Articles in The Register MS Composed by Employees of the Companies They're About
The Register MS is the place to be
Intercontinental Brigading - Part IX - Swatting is Not Funny, Swatting is a Murder Attempt
“Swatting is not harmless. It is a serious crime that can lead to dangerous situations and divert law enforcement away from someone facing an actual emergency. What callers may believe to be a ‘joke’ actually risks the public safety of our communities and can carry lifelong consequences for those responsible”
Links 20/10/2026: Facebook Scraping and Plagiarising News Sites, Copyright Act Turns 50
Links for the day
Microsoft's XBox Leadership and Strategy is Slop
XBox sales are already worst in the entire history of XBox
81% Voted in Favour of EPO Strikes Until End of This Year
Who's in the line of succession at EPO?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, October 19, 2026
IRC logs for Monday, October 19, 2026
Gemini Links 20/10/2026: Old Movies, Bandera Hike, and Mongolian
Links for the day
Techrights Search One Year Later
This year, as we turn 20 in just over 2 weeks, we'll have more surprises and enhancements
EPO Strikes Will Carry on Until End of This Year (as We Predicted), Will Likely Continue Next Year/s
Do we still have media in Europe?
'Cocaine King' Campinos Doesn't Have Sufficient Votes to Carry On Unchallenged, But He Has 2 More Months to Bribe Voters With 'Cooperation Money'
In any democratic, functioning institution they would not even ask if he can continue another term; he would be summarily sacked and investigated over the corruption, the cocaine, the racism and so on
Media 'Blackout' About Microsoft-Danfoss Connection After Almost 1,000 Supermarkets in France Get Cracked, Huge Amount of Food Destroyed
someone deployed malware to fridges
Today The Register MS Published "SPONSORED POST" Paid for by the Communist Party of China, It Mentions "AI" 19 Times
The Register MS is a marketing company
In Late October 2025 Spouse of Matthew Garrett Said He Had Them Raped and Broke Legs of Puppies, This Week Says He "Doesn’t Know How to Use Computers or Power Tools" (He Studied Genetics, Not Computers)
Harvey Weinstein did the same
Microsoft is Paying Many Workers to Leave the Company This Year, Just Don't Call it "Layoffs"
in some cases Microsoft pays people to leave while calling it "voluntary"
Gemini Links 19/10/2026: Orchids, Reducing GAFAM Reliance, and Deploying on OpenBSD
Links for the day
Links 19/10/2026: Intense Protests in France and "Zelenskyy Says Russia Seeking Blackout In Ukraine"
Links for the day
Intercontinental Brigading - Part VIII - How We Convinced British Police That the Americans Were Just Manipulating and Tricking Them at the Expense of British Taxpayers
Their job is to protect communities, not the feelings of Americans who threaten violence
IBM CEO Boasts to the Media About "AI" Momentum While Sacking His Workers Who Worked On It
Recently, IBM took a bailout and got rid of many workers
Corrupt Media Benefits Corrupt Officials (the Case of IBM)
IBM’s Pre-Earnings Publicity Blitz
Links 19/10/2026: "Investors Disturbed by Anthropic's Financial Data" and "The "Dead Internet" Is Here" (Slop and Bots Running on Huge Debt)
Links for the day
Gemini Links 19/10/2026: ICEYE/SAR, Smol Servers, and Starting an Open Access Journal
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, October 18, 2026
IRC logs for Sunday, October 18, 2026