Disable "Secure" Boot Today (the Only Better Time to Do So Was Yesterday)
This article is now outside the subscribers' paywall (as of an hour ago): LWN on what will happen in September (The Microsofters We Sued Helped Microsoft Make GNU/Linux 'Expire' This Year)
IBM and Microsoft want you to think that letting them (G[I]AFAM) control your machine remotely is "security". Nothing could be further from the truth unless you fancy bricking your machine, rendering it unable to boot (faulty firmware or "bad" certificate). It already happened before [1, 2]. It is not some theoretical problem. Remember what happened last summer.
If your computer uses "Secure" Boot and if it is possible to disable it, then disable it. Also, do not modify the firmware or allow IBM to do that for you. It's risky, as people in IRC pointed out this week. The truth of the matter is, the state does not want people's PCs to be secure. To them, national security means lots of zero-days in your machine.
Red Hat's last "true CEO" became a Microsoft booster. Don't trust anything Red Hat tells you about security. Red Hat is a Pentagon contractor and Red Hat had Microsofters on its payroll, promoting Microsoft agenda using Red Hat addresses (some Red Hat addresses also commit changes to Linux that were originally from the NSA, not Red Hat, according to Red Hat staff).
The founder of the FSF explained to the audience last week (Czech people) that "security" no longer means actual security. How right was he. █