1006
you are viewing a single comment's thread
view the rest of the comments
[-] onlinepersona@programming.dev 7 points 8 months ago

MBR is so easy to understand. UEFI, has so many things to understand EFI, ESP, MOK, signing procedures and signing chains, ... it's just so darn complicated.

[-] cley_faye@lemmy.world 11 points 8 months ago
  • Disable secureboot
  • Things just work

And in the end you just remove the need for a physical attacker to use whatever vulnerability there is in your EFI implementation anyway.

[-] 0x4E4F@sh.itjust.works 1 points 8 months ago

Things just work

Yeah, if you have only one OS. Or when you have more than one, but the other one doesn't constantly try to fuck up the first one.

MBR is easy in this regard. Windows never touches the MBR magic, even when updating, so it's all good. GRUB keeps the MBR in check, Windows doesn't meddle, everything's hunky dory in MBR boot land.

[-] cley_faye@lemmy.world 1 points 8 months ago

Windows never touches the MBR magic

I get you're young from that statement alone.

[-] 0x4E4F@sh.itjust.works 1 points 8 months ago

I'm not (38). I should have been more precise, Windows doesn't touch the MBR magic any more.

[-] 0x4E4F@sh.itjust.works 3 points 8 months ago

Yep. Plus, the less the firmware knows what you're booting, the better.

this post was submitted on 07 Jan 2024
1006 points (97.7% liked)

linuxmemes

20704 readers
493 users here now

I use Arch btw


Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS