this post was submitted on 14 Jan 2025
410 points (98.6% liked)

Technology

70995 readers
3675 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] boreengreen@lemm.ee 98 points 4 months ago (4 children)

The world would be a better place if locked bootloaders were not a thing. I agree that there needs to be laws in place to prevent the sale of these devices.

[–] Zak@lemmy.world 65 points 4 months ago (1 children)

Locked in the technical sense of being able to verify the operating system isn't a bad thing. The problem is when the device owner can't add signing keys of their choice.

The latter is what GrapheneOS does.

[–] Corngood@lemmy.ml 31 points 4 months ago (1 children)

Something that worries me about that is attestation. This is the advice from the GrapheneOS Devs:

https://grapheneos.org/articles/attestation-compatibility-guide

They're asking app developers to trust their keys specifically, which would mean that the app might work on GrapheneOS, but not my fork of GrapheneOS with some cherry picked fix I want.

It would be much better if we stamped this out now, before all online services require attestation.

[–] Zak@lemmy.world 15 points 4 months ago

Agreed. Microsoft proposed something along those lines under the name "Palladium" a couple decades ago and was widely criticized, even in the mainstream press. Apple and Google doing the same thing to our phones barely got a whimper.

[–] henfredemars@infosec.pub 26 points 4 months ago

I don’t have a problem with boot loaders doing cryptographic checks in general, as long as the ultimate decision lies with the device owner.

[–] masterofn001@lemmy.ca 14 points 4 months ago* (last edited 4 months ago) (1 children)

Imagine a PC with a locked bootloader.

Imagine having to purchase a new PC to simply be able to get updates. Or be locked to windows for life and not have an option to install Linux, BSD, whatever else.

There is zero reason to restrict installing a new os or firmware on a phone except planned obsolescence

[–] bier@feddit.nl 7 points 4 months ago

Imagine buying a PC but only be able to install anything from one app store made by the manufacturer

[–] Cocodapuf@lemmy.world 6 points 4 months ago* (last edited 4 months ago) (2 children)

How do you feel about locked bootloader's on game consoles?

I figure this is one of those edge cases people might fall on either side of. But consoles are also a really large segment of the tech market, so it's worth thinking about.

[–] SomethingBurger@jlai.lu 12 points 4 months ago (1 children)

The PS3 used to have an unlocked bootloader with official Linux support. Sony removed it because of piracy. Of course, piracy is still possible, but as always, it's only an excuse to exert more control over customers.

[–] Cocodapuf@lemmy.world 1 points 4 months ago

That's pretty cool though, I'm glad they at least experimented with it. I wonder if they just chickened out at some point or if they actually found a steep increase in piracy?