undefined | Better HN

0 pointseecc8d ago0 comments

I guess the point is: delegate to kernel, then “oh, people with root can bypass with modules? Secure Boot!”

0 comments

And then only trusted devices with an “acceptable” posture and valid manufacturer attestation can participate! Hellscape.

This is exactly what will happen.

j / k navigate · click thread line to collapse

0 pointseecc8d ago0 comments

I guess the point is: delegate to kernel, then “oh, people with root can bypass with modules? Secure Boot!”

And then only trusted devices with an “acceptable” posture and valid manufacturer attestation can participate! Hellscape.

This is exactly what will happen.

j / k navigate · click thread line to collapse