Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

And this shows why forcing that in shim was a bad idea. They should have made a version breaking the chain, and allowing to boot unsigned kernel.


No, this shows why (forcing) Secure Boot was a bad idea. Allowing Shim to load unsigned kernels would be equivalent to having it bypass SB in the first place, which Microsoft would presumably never sign.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: