More than 4 in 10 PCs still can't upgrade to Windows 11 | Hacker News Reader

More than 4 in 10 PCs still can't upgrade to Windows 11

theregister.com

6 pointsorionion5 comments

But in a few years, governments will be able to confidently claim that any device not running in so-called Secure Boot mode is a cyber-security risk and can't be allowed online.

Similarly, they'll claim that all devices must either only run apps from "approved" app stores, or have a system like Apple's "Gatekeeper" which checks every binary you try to run against a central blacklist of forbidden apps.

Then you can kiss goodbye to P2P downloading, E2EE messengers, Tor, cryptocurrencies, and VPNs (unless those apps also implement blacklisting/whitelisting, or their developers will face criminal liability for what users do with them).

I consider this a feature. It convinced me to move two windows laptop "servers" to pop_os LTS. That's fine windows execs, keep digging the grave of your OS, we all know you want everything online so you can charge monthly merely to use an "OS"

I don't fault Microsoft for increasing the security baseline, it's a fact that threats actors are getting smarter in general.

If they did nothing, people would whinge that "Windows is so insecure". The reality is that Linux is starting to fall into this category. Having said that work on using the TPM has already taken place with systemd-cryptenroll and systemd-measure and it will be nice when "Legacy BIOS" is deprecated from most mainstream desktop distributions.

Maybe some day we will see some sort of immutable system that uses fs-verity, where "apps" are installed from an app store like Snap or Flathub. Then maybe we'll get some proper app sandboxing.

https://www.freedesktop.org/software/systemd/man/systemd-cry...

https://www.freedesktop.org/software/systemd/man/systemd-mea...

https://www.kernel.org/doc/html/latest/filesystems/fsverity....

1 in 4 of my PCs is this way by design.

Kiss my grits, Billyboy!

Keep it.

Reply on news.ycombinator.com