this post was submitted on 23 Jul 2025
89 points (94.1% liked)
Linux
8723 readers
410 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Not if you disable it, "secure boot" is a joke anyway.
I mean, Secure Boot does actually help defend against evil maid attacks if paired with FDE. Someone can't just fuck with your
/boot(CVE-2016-4484 nonwithstanding) to do naughty things with your system if you have Secure Boot enabled. Does that fit with most people's threat model? I dunno, probably not. It does actually do something useful though.My work computer has it enabled and I feel better for it. The issue described in the article is easily dealt with if you just keep up with your firmware updates using
fwupd.Ya, Secure Boot is really only useful for corporate devices or very specific people who might actually be targeted by state level attackers. For most of us, it's not worth the hassle.
we are all currently being surveiled by state level attackers.