this post was submitted on 15 Jul 2026
250 points (98.4% liked)

Technology

86401 readers
2808 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
250
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now (www.welivesecurity.com)
submitted 2 days ago by beep@piefed.world to c/technology@lemmy.world
62 comments fedilink hide all child comments
 

cross-posted from: https://piefed.world/c/tech/p/1263218/microsofts-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until-now

you are viewing a single comment's thread
view the rest of the comments
[–] exu@feditown.com 4 points 2 days ago (1 children)

Universal Blue distros do that. For some reason you need to enter a password though.

[–] cmhe@lemmy.world 1 points 11 hours ago* (last edited 11 hours ago)

This is the MOK (Machine Owner Key), which is part of the shim bootloader, not UEFI secure boot.

The shim bootloader is signed by Microsoft UEFI secure boot keys, so Microsoft is the root of trust there.

On some systems you can delete all Secure Boot keys, and provision your own, then you don't need the shim bootloader and can sign your own bootloader or Linux kernel directly. Windows would not be able to boot on those systems.