quick_snail@feddit.nl 2 days ago
You’re describing Secure Boot. It happened years ago.
And, btw, the Android thing also doesn’t affect anyone without gapps. Chill out.
When I was tasked with buying laptopa for a company, I made sure to test Linux compatibility on every machine. If the model didn’t support Linux, we didn’t buy it.
Most of the devs were windows users, but there were enough devs and sysadmins that preferred Linux that it just made more sense to only buy hardware that supports both windows and Linux.
Corporate pressure would never allow such lockdown in the market
There is no requirement for it, and can be disabled
Exactly.
For now.
You’re describing Secure Boot.
Secure Boot is literally configurable. You can create your own key and sign whatever you want with it. See sbctl.
Yes and no. Most firmware this is impossible.
If you change platform keys, it looks to me like you can brick your system if hardware component drivers that execute during boot are signed by microsoft keys.
Microsoft will make sure many of their partners sign hardware drivers with their keys to be windows 11 certified of course. No other reason.
They will encourage manufacturers to only allow secure boot in UEFI. Then at some point they will stop signing UEFI loaders, like shim, that linux distros rely on to boot.
nibbler@discuss.tchncs.de 2 days ago
so only 99% are affected, that really calms me down.
Manny services that are connected to finance/payment require gapps, car sharing, banking etc.
quick_snail@feddit.nl 2 days ago
Don’t install gapps. And ffs don’t use banking on insecure devices anyway
tired_n_bored@lemmy.world 2 days ago
If I don’t install gapps my banking apps don’t work.
BeardedBlaze@lemmy.world 2 days ago
Does the bank app do anything that the mobile bank website can’t? I’ve never felt the need to install an actual bank app. You can use micro g or sandbox gapps.
hunnybubny@discuss.tchncs.de 2 days ago
Define insecure devices.