1 comment

sorted by: hot top controversial new old
[–] 0 points 7 months ago

What a nightmare.

I have helped a lot of people in my life with computers and encrypted drives have always been way more of a problem than a benefit. I get there are good use cases, but the majority of people should stay away from this technology unless they actually study and understand how it works.

  • source
  • 23 comments in c/technology@lemmy.world view that post
    [–] 134 points 7 months ago
    [–] 103 points 7 months ago (4 children)

    I've never trusted full disk encryption because I understand the person most likely to get locked out of my data is me.

    I can see the use case for laptops, but my security policy is "if you have physical access, you win".

  • source
  • hideshow 4 child comments
  • load more comments (1 reply)
    [–] 75 points 7 months ago (1 child)

    "I can't use Linux windows just works",

  • source
  • hideshow 1 child comment
  • [–] 20 points 7 months ago* (last edited 7 months ago) (1 child)

    I’m not sure what the problem is. His account is locked, but it’s not like he can’t still sign code and distribute it even if that means using a new account.

    Edit: other articles point out that his company failed certification, and he’s not been able to reach support to find out why.

  • source
  • hideshow 1 child comment
  • [–] 7 points 7 months ago

    The answer to your question was in the article;

    Because Microsoft requires developer accounts like his to re-verify the security of their software, Idrassi said that many devices running VeraCrypt will soon be unable to boot if the issue is not resolved.

  • source
  • parent
  • [–] 18 points 7 months ago (7 children)

    And this why Secure Boot can't be trusted. It is Micro$lop that signs and issues the keys.

  • source
  • hideshow 7 child comments
  • [–] 24 points 7 months ago (5 children)

    Secure Boot has nothing to do with Microsoft, it's a UEFI feature.

    You can enroll your own Platform Key and have complete control over the entire Secure Boot system.

    https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

    I use a signed Unified Kernel Image to use Secure Boot and my machine has zero Microsoft software on it. (Arch, btw)

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 7 months ago (4 children)

    wasn't there some dumb shit like every linux distro using fedora keys which were from microsoft?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 7 months ago* (2 children)

    Microsoft signs Red Hat certs then Red Hat signs everyone's certs, so the only thing Microsoft can do is to revoke Linux as a whole.

    It's the solution that requires minimal user effort since most computers are designed for Windows.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 7 months ago (1 child)

    And MS probably won't do it willy-nilly because their stack is peobably using it to some degree and many more of those Fortune-X00 are very likely something RHEL. So fucking that over will crash their stock like it did with CrowdStrike but much much worse.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 14 points 7 months ago*

    You can use custom keys with secure boot. Any PC newer than 2015 should give you that option.

    You don't have to use Microsoft's keys.

    This isn't a secure boot issue. This is a bootloader issue.

  • source
  • parent
  • [–] 4 points 7 months ago

    Another reason to install Linux and be done with this shit.

    I recommend starting with Fedora KDE, and delving to anything else later...

  • source
  • [–] 17 points 7 months ago (3 children)

    In Idrassi’s case, he said he is able to push new updates to Linux and macOS users unhindered, but the majority of his users that run Windows cannot currently receive updates.

    So, no problem then.

  • source
  • hideshow 3 child comments
  • 2 comments in c/cybersecurity@sh.itjust.works view that post
    [–] 11 points 7 months ago

    Another reason to leave Windows...

    (I know, my comment doesn't address the core issue)

  • source
  • [–] 6 points 7 months ago