Hacker News Reader

Sounds like a good thing, insofar as it allows you to bypass the Windows requirement that Secure Boot be enabled. This should be good news for people running obscure Linux distros or other operating systems.

Might be better to disable it by default, though. Do other motherboards support this "feature"?

View on HN

It's not good news for Linux distros. This setting breaks GRUB's expectations of shim being available when Secure Boot is enabled. Because of this, it will decline booting and will show you an error message.

IIRC EVGA and Gigabyte have "Audit mode" option in their firmware, which does only logging.

My Linux prefers this mode, but I use ELILO & LILO.

MacBooks have a much better feature where you can run MacOS in full security mode while having separate bootable partitions which are in permissive mode.

Much better than the all or nothing model of secure boot.

To be fair, the SecureBoot 'shim' loader is pretty much designed to do this, with user's consent.

Reply on news.ycombinator.com