this post was submitted on 07 Jan 2024
1009 points (97.7% liked)

linuxmemes

20761 readers
1941 users here now

I use Arch btw


Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] cley_faye@lemmy.world 11 points 8 months ago (1 children)
  • Disable secureboot
  • Things just work

And in the end you just remove the need for a physical attacker to use whatever vulnerability there is in your EFI implementation anyway.

[–] 0x4E4F@sh.itjust.works 1 points 8 months ago (1 children)

Things just work

Yeah, if you have only one OS. Or when you have more than one, but the other one doesn't constantly try to fuck up the first one.

MBR is easy in this regard. Windows never touches the MBR magic, even when updating, so it's all good. GRUB keeps the MBR in check, Windows doesn't meddle, everything's hunky dory in MBR boot land.

[–] cley_faye@lemmy.world 1 points 8 months ago (1 children)

Windows never touches the MBR magic

I get you're young from that statement alone.

[–] 0x4E4F@sh.itjust.works 1 points 8 months ago

I'm not (38). I should have been more precise, Windows doesn't touch the MBR magic any more.