Hacker News Reader

> There is no scenario where non-technical users boot into a malignant OS.

According to the report there is, and I believe the report is correct, when the "malignant OS" is not actually a full OS, but rather a rootkit. This rootkit might have been the result of a non-technical user opening a mail with a strange attachment.

View on HN

The secure boot "solution" requires trusting a huge amount of closed software and hardware.

It's supposed to protect from a very theoretical risk.

Boot time pre-OS malware is not a theoretical risk. At all.

No. The attack is real. The risk is just not there. Most systems have valuable data on the current OS rather than a future one.

Right, there are such scenarios, but it comes with disadvantages that are also relevant to security, to a larger degree in my opinion, and the mechanism is not excluding every form of rootkit. If you open a malignant attachment and execute it, there is just so much you can do.

There are no security disadvantages that come with enabling Secure Boot. Doing so doesn't give anyone any additional control over your workstation.

Reply on news.ycombinator.com