People who are still inclined to believe that Linux systems will stop booting next month because of secure boot rollover! Send me evidence that you have donated to a charity and, if Linux stops booting on any system after 2025-09-11, I will (your choice) either match that donation or pay you back your donation (you will need to deal with the tax consequences), up to a total of $50,000.
Those of you who are certain this is going to happen: I would encourage to you make the same commitment but in the other direction (absolutely fine if the $ amount is smaller, I am in a fairly privileged position here)
@mjg59 Uhh, as someone with a pedantic mind, you may want to reword this to clarify that this covers cases where the system stops booting *specifically because of the secure boot rollover*. As worded, anyone who has their Linux system fail to boot, any time after then, _for any reason_, can say "Well, *technically* you only said..."
@TatraT815 Hey if they want to sue me in internet contract court
@TatraT815 (But thank you that is a sensible thing to do)
And I can't believe I need to say this but I'm sure someone will decide it's a conspiracy thing otherwise: no Microsoft is not paying me to do this, Microsoft has never paid me, and if I'm wrong on this then I don't get to replace my bathtub with one that I fit in and the solar panels are probably also not happening
I just turn Secure Boot off. π€·ββοΈ I assume this makes me safe from any certificate-rollover shenanigans?
@mjg59 <devil's advocate> so if you are so certain why have you put a $ limit on it? Just saying πΉ </devil's advocate>
@rupertcutler Maybe I've miscalculated, and I wouldn't want people to make financial decisions based on something I can't follow through on
@mjg59 Have any of the secure boot truthers just tried setting their clock forward to see if their system still boots?
@jamesh you'd think
@mjg59 that's too bad, I was rooting for the fancy bath tub and solar panels
@saraislet I literally do not fit in standard US bathtubs and I would like to stop being limited to showers but I will take this bet
@mjg59 @saraislet I feel you. It's either cold legs or cold torso. π€£
@rupertcutler @mjg59 everybody has a limit, if you don't write it you don't know if it's 100$ or 100M$ (often, it's more like 100$ if it's not written), so writing the limit show how serious he is.
@rupertcutler @claudex If I had as much money as Bill Gates I'd just make sure the problem was fixed instead of whatever this is
@mjg59 big my pillow guy vibes here π
@binford2k Ah but I will actually follow through
Isn't that the date Wimdows 10 gets turned off and the low Windows 11 takeup hits Microsoft?
@Thebratdragon No clue whatsoever, not something I care about in the slightest
more of a comment on why the lie is being spread..... 'tis the fanboys at work.
@Thebratdragon Which fanboys? I've only heard this from Linux people
ahhh the only places I have seen it mentioned has been with upgrade/go back to/you need Windows, so obviously in different circles.
I think the AI boys/nvidia and MS are getting nervous that win 11 is not making the inroads they want.
@Thebratdragon I didn't mention Windows anywhere, the scenario I described doesn't involve Windows, I have no idea what the relevance here is
@Thebratdragon Indeed, your original reply wasn't worth it
and have done for 14 years
@Rairii BRB booting Fedora 18 on a machine without a dbx update
My reply was, the linux shut off has only been seen by me in context of windows 10 stopping being supported.
In your microbubble is seems it has only been mentioned by Linux users, maybe get out more, work for an ethical company, not be helping destroy the planet, you know, simple things.
you work for Nvidia, solar panels etc do not offset the harm your companies products do every second of every day.
but hey stay cryptorich
@Rairii The Microsoft KEK signed db update means all secure core systems that are only supposed to trust Windows will now also trust new third party CAs, Microsoft's internal strategy here is clearly not well defined
@mjg59 What I miss? What's this about secure boot roll over?
@mjg59 Oh. Well, that's a load of meh.
@mjg59 I'm not even using secure boot. I don't trust it.
@hellomiakoda then you are not the target of this thread
@mjg59 I know. I still wanted to know about it. Sorry to ask
@hellomiakoda fair, sorry, legitimate to ask and apologies for my reaction there
@mjg59 Just turn "secure boot" of. It's only snake oil anyway.
Malicious persons who get hold of your computer can boot whatever they want; whether "secure boot" is turned on or not, whether there is a signing key stored for the system to start or not.
@mjg59 btw do you know any good articles describing secure boot chains in-depth with historic vulns for different parts etc?
@mjg59 Hm if you'd worded this a little less carefully I would have taken you up on it just for the probably-high chance my linux laptop stops working for random, secure-boot-unrelated reasons
@mjg59 I mean, secure boot not working on Linux is such a meme now that I just assume it won't work.
@disorderlyf which is odd since it's been working fine for almost 13 years
Current laptop has never had secure boot turned off, and also has not run Windows not-virtualized since I got my grubby fingers on it π€·. It just works, and turning off secure boot is too much effort.
@mjg59
- replies
- 1
- announces
- 0
- likes
- 0
@wouter @mjg59 The distro I run in particular doesn't support it. I'd heard more mainstream distros like Ubuntu did, but it's been so long with so little progress for my daily driver that it's easier for me to just toggle a switch in the BIOS. It's possible what I run in particular is just weird about it.
Fair. That's context which I didn't have, and in that context it's indeed more complicated.
Theoretically it's still possible to set up a shim and grub from somewhere else and then sign your own kernels, but that's way more involved than just to disable secure boot.
@mjg59