Greentext

7204 readers

403 users here now

This is a place to share greentexts and witness the confounding life of Anon. If you're new to the Greentext community, think of it as a sort of zoo with Anon as the main attraction.

Be warned:

Anon is often crazy.
Anon is often depressed.
Anon frequently shares thoughts that are immature, offensive, or incomprehensible.

If you find yourself getting angry (or god forbid, agreeing) with something Anon has said, you might be doing it wrong.

founded 2 years ago

MODERATORS

Early_To_Risa@sh.itjust.works

647

Anon gets rid of drop box (infosec.pub)

submitted 1 week ago by Early_To_Risa@sh.itjust.works to c/greentext@sh.itjust.works

104 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] j4k3@piefed.world 74 points 1 week ago (8 children)

The owner of the machine is the owner of the secure boot keys.

[–] Whostosay@sh.itjust.works 18 points 1 week ago* (last edited 1 week ago) (7 children)

J4k3, hope youre doing alright dude.

Got a question you may be able to help me with. I have never changed my secure boot key on my motherboard after switching from windows. Do I need to worry about anything? If I don't, what's the pros and cons and what not.

I remember reading that there's some sort of potential issues with keys from windows if you're a Linux user a few months back.

[–] mushroomman_toad@lemmy.dbzer0.com 5 points 1 week ago* (last edited 1 week ago) (1 children)

Pros and cons of disabling the default Microsoft key:

(Assuming you have secure boot enabled, and want the security that comes from that)

pros:

You control your own key and have full choice over what software can start up on your computer, software cannot be approved by anybody else.
Your secure boot security model is not vulnerable to the risk of booting 3rd party software with known security vulnerabilities.
Sophisticated attackers with physical access to your computer cannot carry out an evil maid attack on your computer and convince it to trick you or steal your data.

cons:

You need to have software installed to manage the key. There is software available for Ubuntu and NixOS.
There are many buggy UEFI implementations out there that require the Microsoft key to load built-in oproms during standard boot, potentially bricking your computer.
Software that gains root access to your computer could steal your signing key, potentially negating the benefits of secure boot against non-evil maid attacks.

[–] felsiq@piefed.zip 2 points 1 week ago

There are many buggy UEFI implementations out there that require the Microsoft key to load built-in oproms during standard boot, potentially bricking your computer.

From what I’ve found looking into this before, nvidia graphics cards have these oproms so your own secure boot key + nvidia will brick your shit. Can anyone confirm or deny this? Are modern AMD cards any better for this? I’ve been itching to use my own keys for ages and this is the only thing holding me back

load more comments (5 replies)