• dan@upvote.au
    link
    fedilink
    arrow-up
    24
    ·
    15 hours ago

    Most modern Linux distros do use secure boot and TPM, but you’re right that they’re optional.

    • LifeInMultipleChoice@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      15
      ·
      15 hours ago

      Yeah the UEFI requirement is likely specifically required for secureboot/TPM as well. TPM 2.0 didnt work well with legacy boot options. I’ve said it before and I’ll say it again, Microsoft wouldn’t force those things as requirements if they didn’t think they were going to be held liable in court to provide security for their users. Sure it sucks to have it “forced” but there are worse things to complain about. Like the Microsoft account requirement. Yet once again I’m sure that’s because if you encrypt a drive and forget your password, being able to prove your identity and reset the password is preferred to them than saying the data is gone. Only so many “my wedding photos” and such are unrecoverable you want to deal with. Having a solution for a forgotten password is better than not. And not encrypting the drives isn’t a better answer, as once again, your back to being sued. The advertisements and bloatware are what bother me much more.

      • 𝕸𝖔𝖘𝖘@infosec.pub
        link
        fedilink
        arrow-up
        10
        ·
        13 hours ago

        But it should be optional with a very clear “if you don’t have this account then X could happen” warning and agreement. I don’t want a ms account, and my computer shouldn’t force me into it. That’s my gripe with that bit.