News for hackers. Stuff that matters.

A comment on Linux and Secure Boot certificate expiration. Parent comment

Re:Linux and Secure Boot certificate expiration by zozbot234 on Friday July 18, 2025 @06:02AM (#44602956)
> I'd love to know if my machine has been compromised with early boot stage "meta-hypervisor" or not.

Boot from read-only media you control, or set up network boot from a source you trust - you have to trust the firmware anyway. Secure Boot itself is quite pointless.

[ Parent | on HN ]
Re:Linux and Secure Boot certificate expiration by fsflover on Sunday July 20, 2025 @06:51PM (#44630127)
> you have to trust the firmware anyway

If it's FLOSS wirh reproducible builds, your trust can be minimized, since the community verification is going on constantly. Also, your suggestion is quite inconvenient and cumbersome to use and set up.

[ Parent | on HN ]