this post was submitted on 06 Oct 2025
674 points (99.4% liked)

Technology

75792 readers
3085 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Kolanaki@pawb.social 2 points 2 days ago* (last edited 2 days ago) (3 children)

I'm gonna need an explanation how anything could prevent me from just formatting the drive and doing what I want, barring the use of proprietary hardware.

[–] WhyJiffie@sh.itjust.works 1 points 23 hours ago

I'm pretty sure that unless you use some unusual SBC, all your computer parts are proprietary hardware.

[–] cley_faye@lemmy.world 6 points 1 day ago

Proprietary hardware, like opaque bioses that can only be updated with signed, proprietary blobs? The bios that's in charge of picking something to boot from from storage? The bios that can decide which bootloader is allowed through digital signatures? The signatures that are only valid if their public key is registered in the bios? The proprietary, opaque bios that decide which bootloader's signature is valid through keys it can restrict?

Yeah, it's all coming together. Always has been. Joking aside, I'm still surprised this whole "fully locked bios" didn't take off. And I'm glad for it.

[–] DFX4509B_2@lemmy.org 10 points 2 days ago* (last edited 2 days ago)

Forced SecureBoot with only MS keys and no way to install user-signed keys and no Linux shim would block non-Windows OSes from booting.

Basically, Pluton functions similar to how mobile devices function in terms of locked bootloaders.

AFAIK the only devices currently produced which actually use Pluton are Surface devices though, and if it's not being implemented as intended, it's just seen as a generic TPM by other OSes.

For anyone wondering what Pluton is: https://learn.microsoft.com/en-us/windows/security/hardware-security/pluton/microsoft-pluton-security-processor

Pluton as TPM: https://learn.microsoft.com/en-us/windows/security/hardware-security/pluton/pluton-as-tpm