this post was submitted on 08 Apr 2026
104 points (99.1% liked)
Technology
83564 readers
3583 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
I've never trusted full disk encryption because I understand the person most likely to get locked out of my data is me.
I can see the use case for laptops, but my security policy is "if you have physical access, you win".
Same. I encrypt my laptop disks, but I never bothered with the home machines.
well i suppose it depends on how deep your personal security goes. are your passwords stored on your device? are they stored securely? do you have a password manager? do you have a standalone app for your password manager and not a browser extension? is the master password for your password manager stored on any of your devices? do you have any settings that automatically locks your PC upon inactivity? is the pin for your PC related to you personally in any way? i get what you're saying because at the end of the day physical access IS pretty hard to mitigate. but you'd be surprised how far simple steps can take you.
"I can't use Linux windows just works",
Anyone who says that is not using veracrypt.
I’m not sure what the problem is. His account is locked, but it’s not like he can’t still sign code and distribute it even if that means using a new account.
Edit: other articles point out that his company failed certification, and he’s not been able to reach support to find out why.
And this why Secure Boot can't be trusted. It is Micro$lop that signs and issues the keys.
You can use custom keys with secure boot. Any PC newer than 2015 should give you that option.
You don't have to use Microsoft's keys.
This isn't a secure boot issue. This is a bootloader issue.
Secure Boot has nothing to do with Microsoft, it's a UEFI feature.
You can enroll your own Platform Key and have complete control over the entire Secure Boot system.
https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot
I use a signed Unified Kernel Image to use Secure Boot and my machine has zero Microsoft software on it. (Arch, btw)
In Idrassi’s case, he said he is able to push new updates to Linux and macOS users unhindered, but the majority of his users that run Windows cannot currently receive updates.
So, no problem then.