478
Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0 (www.youtube.com)
submitted 1 year ago by to c/games@lemmy.world
211 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 77 points 1 year ago (58 children)

beautiful. fuck secureboot.

  • permalink
  • fedilink
  • source
  • hideshow 58 child comments
    •
  • [–] 25 points 1 year ago (57 children)

    Why?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 57 child comments
    •
  • [–] 103 points 1 year ago (32 children)
    • some people run more than 1 OS
    • some people actually program and need to load unsigned shit all the time
    • some people have legacy hardware that doesn't run with secureboot
    • it is my decision and my decision alone how i boot my operating systems. not EA's.
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 32 child comments
    •
  • [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it
  • [–] 23 points 1 year ago* (4 children)

    (1) Yeah, well the secure boot keys needed for Linux distributions expire in September (https://www.tomshardware.com/tech-industry/cyber-security/microsoft-signing-key-required-for-secure-boot-uefi-bootloader-expires-in-september-which-could-be-problematic-for-linux-users), so that seems like a sustainable solution, sure buddy.

    (3) What's your income? What region of the world do you live in and what hardware is available to you? I'm still using an am4 platform PC as my daily driver because I can't burn money. One of my buddies has an AM3 PC. Many people use modified surplus office PCs (especially in developing nations like South America or SEA), which don't have secure boot as an option. Check your privilege, and maybe donate some of your spare hardware to those who need it, if you want to make this "a non issue" for everyone.

    (4) Yeah. I own my hardware, I configure my software. I gut Windows like a fish and keep it on a leash for these games, and use Linux for my work and for the games that respect the ecosystem.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it
  • [–] 14 points 1 year ago (2 children)

    On the list thing, it seems that adding numbers with periods in a list seems to auto configure it to ascending numbers. That's why I used (1) (3) (4). Weird, but I guess that's the work around.

    Enrolling your keys doesn't work btw, because battlefield checks which keys you enroll, only accepting the default MS keys. Also on the hardware front, it is a big problem for gamers on a sub-300 USD budget these days - the best deals are on legacy hardware or surplus office equipment, mainly AM3-AM4 era.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (1 child)

    The number list is how markdown works. You can enter all 1's and it will automatically create ordered list.
    Handy when you may need to edit list items, as you dont need to renumber even in plain text.
    Markdown spec should allow for explicit number by using a bracket ')' instead of a dot, but it may not work everywhere.
    Let's give it a go

    3) start from 3  
1. Then  
1. Continue
    1. start from 3
    1. Then
    2. Continue
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • load more comments (1 reply)
  • [–] 3 points 1 year ago

    You can run more than one OS with secure boot enabled. It’s just a pain in the ass.

    Weird, for me it was just flicking the switch in UEFI and now Grub and through it Windows 10 and Fedora 43 boot in Secure Boot.

  • permalink
  • fedilink
  • source
  • parent
  • [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it
  • [–] 14 points 1 year ago (3 children)

    you think loading my own kernel modules is not related to secure boot? i guess you don't work in IT then.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 9 points 1 year ago (1 child)

    Most people who work IT don't even know what a kernel is, tbf

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 year ago*

    I recently had an rfid scanner immediately rma-d back that had just been returned to us. The new issue was caused by a setting and not by a defect. I asked our IT/help desk if it WAS a setting that could be changed

    "I don't know. I get the thing, I check these settings, I check those settings, that's all I know"

    😑😑😑

    So me and another person are out of our equipment for another couple weeks while the scanner is sent back for "repairs" and the repair people will go "😑 tap tap tap idiots"

    (Edit: I know it's a setting because I talked with the other person who uses it and I explained the issue and he let me know it is something he changes)

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 1 year ago (17 children)

    You can't install most linux distributions with secure boot enabled.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 17 child comments
    •
  • [–] 8 points 1 year ago (12 children)

    This is outdated information. Linux has supported secure boot for quite a while now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 12 child comments
    •
  • [–] 3 points 1 year ago (2 children)

    And Microsoft is shutting out most third parties in the near future because of Crowdstrike, so Linux likely won't be supporting Secure Boot in the future, even if someone did want to enable it for some odd reason.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (8 children)

    Do you have any advice for someone that dual boots SteamOS and Windows 10 on a Steam Deck?

    I've heard online that since SteamOS manually signs keys or something, that if any changes happen to the kernel that later need to be updated by SteamOS, I'd need to re-sign the keys or whatever. Idk I'm not well versed in any of this

    I've heard it's as easy as downloading the M$ keys to enable Secure Boot, but I also don't want to brick my Deck.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 2 points 1 year ago (7 children)

    Windows 10 support is ending soon so there’s no reason to have it on your steam deck. Steam will stop supporting it sooner after Microsoft does, just like steam does with Apples operating system.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 1 point 1 year ago (6 children)

    Windows 10 commercial is ending, not the LTSC versions. Those are good for another 2-7 years iirc

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 1 point 1 year ago (5 children)

    No, they are killing it unless you pay and extra $30 a month and use a Microsoft account and kill local accounts.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 year ago (4 children)

    Source?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago (3 children)
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 1 year ago (2 children)

    That's for commercial releases of Windows 10 dumbass. There are two other enterprise releases that will have free security updates for 2-7 more years.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    Which is again proving my point. Steam is selling games to people with enterprise licenses.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    You never made that point. Stop moving the goal posts.

    Do we have any evidence that Steam will not supported anything Windows 10 related, given that commercial licenses are ending and many people are shifting to enterprise licenses?

    And it's not like Steam hasn't already been doing this. People have used enterprise licenses for legit and nefarious purposes for years. I doubt they'd change anything in October. They aren't owned by M$

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 1 year ago (3 children)

    Really? Which would those be? So far I haven't come upon one.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it
    • load more comments (1 reply)
    • load more comments (2 replies)
  • [–] 32 points 1 year ago (15 children)

    Needlessly intrusive. Can obviously be circumvented by cheaters anyway, so quite possibly superfluous. Apart from that it protects against the kinds of attacks that typically require physical access to the computer. If you have physical access you have full access anyway. Etc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 15 child comments
    •
  • [–] 18 points 1 year ago (13 children)

    If you have physical access you have full access anyway. Etc.

    You know secure boot was specifically made to protect users for this exact use case. Any tampering of the system will prevent the system from booting.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] 9 points 1 year ago (8 children)

    I get your pc, "tamper" it, then i install a fake bios that tells you all is well and that your tpm and secureboot and whatever else bullcrap they invent is still happy.

    See the problem?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 5 points 1 year ago (7 children)

    It won't boot though, because the keys to decrypt the system are stored in the TPM.

    Sure you could replace the whole OS, but that's going to be very obvious and won't allow you access to the data.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 9 points 1 year ago (5 children)

    If you have physical access you could go into the bios and turn off secure boot

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 5 points 1 year ago (2 children)

    If you enable Secure Boot you should also set a BIOS password for this very reason.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • load more comments (2 replies)
  • [–] 3 points 1 year ago (3 children)

    A person with physical access can tamper with the OS, then tamper with the signing keys. Most secure boot systems allow you to install keys.

    Secure boot can't detect a USB keylogger. Nothing can.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it
  • [–] 2 points 1 year ago (1 child)

    A USB keylogger is not detectable by the computer, not in firmware nor operating system. It passively sniffs the traffic between the USB keyboard and the computer, to be dumped out later.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • load more comments (1 reply)
  • [–] 11 points 1 year ago (7 children)

    It fucks with Linux. I literally just disabled it to resolve a driver install issue before this announcement was made.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 2 points 1 year ago (5 children)

    Secureboot doesn't "fuck with Linux". It does protect you from malware trying to install unsigned kernel modules.

    Apparently that driver is unsigned, which is not the normal case nowadays.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •