Bonum Certa Men Certa

'Secure' Boot is Not Secure, Time to Abandon It

Summary: The 'security' boasted by restricted boot is shown to be a sham; other booting systems ought to be promoted at UEFI's expense

THE malicious thing which is UEFI (with or without restricted boot) has been covered here a lot. It needs to be shunned and those behind it should be investigated for collusion. It's not secure, as Torvalds predicted (with strong words at times).



As part of his ongoing investigation of UEFI, Dr. Garrett found serious flaws in restricted boot. As Phoronix put it the other day, "Matthew Garrett has written an insightful blog post about security issues pertaining to the Linux kernel's kexec functionality that could defeat any security benefits provided by Secure Boot. Using kexec could even allow you to boot a Windows kernel."

UEFI is a sham that hardly offers any benefits to ordinary users; all it does in practice is harm. We need to embrace something like Coreboot [1] instead. The "UEFI" label (which computer makers don't even make visible) should be read as "defective out of the box".

Related/contextual items from the news:



  1. Coreboot Gets Support For Haswell Power Limiting
    After landing hardware support improvements last week for Coreboot, the open-source BIOS firmware replacement now has another new feature: ACPI power limiting and it's been implemented for Intel Haswell CPUs.


Recent Techrights' Posts

Microsoft, Very Deep in Debt, Trying to Take Over Other Companies Without Paying to Buy Them
the CEO strengthened his loyalty to Microsoft
A Code of Conduct Can Lead to Deterioration of Quality Control in Linux (Nobody Reprimanded for Technical Issues, Instead Critics at Times of Crisis Get Reprimanded)
Quality control demands opinionated people, even blunt opinions at times
Online Media as a Lying Machine of Microsoft and Bill Gates (and, As Usual, Follow the Money)
The lies go a lot further than greenwashing
Links 11/12/2023: Buzzword Rules in the EU and Misinformation/Disinformation on the Rise
Links for the day
Today in Techrights
Some of the latest articles
Misogynists Versus Techrights
the "imams" of the tech world
IRC Proceedings: Sunday, December 10, 2023
IRC logs for Sunday, December 10, 2023
Over at Tux Machines...
GNU/Linux news
Links 11/12/2023: Climate News and Chatbots as Plagiarism
Links for the day
Links 10/12/2023: Second Belmarsh Tribunal For Assange, EU Legislates for Buzzwords
Links for the day
Links 10/12/2023: Inflation Woes, Tensions With China
Links for the day
IRC Proceedings: Saturday, December 09, 2023
IRC logs for Saturday, December 09, 2023
Links 09/12/2023: Dictator's Nomination in Russia
Links for the day
[Video] To Combat Efforts to Cancel or Kill the Career (and Reputation) of the People Who Made GNU/Linux We Must Rally the Community
nobody speaks better for projects and for licences than their own founders
Electronic Frontier Foundation Incorporated is Run by/for Corporations Now (Members' Money is Less Than a Quarter of the Money EFF Receives)
Facebook bribes
The EFF Should Know Better, But It Is Promoting Mass Surveillance by Facebook (an Endorsement of Lies)
What is going on at the EFF?
Feedback Desired
Feedback can be sent by E-mail
A Message in Support of Richard Stallman, Condemning Those Who Misportray Him
message about Richard Stallman (RMS)
Links 09/12/2023: Many 'Open'AI Employees Strongly Dislike Microsoft, Many Impending Strikes
Links for the day
IRC Proceedings: Friday, December 08, 2023
IRC logs for Friday, December 08, 2023
Over at Tux Machines...
GNU/Linux news