• Grass@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    3
    ·
    18 hours ago

    wasn’t there some dumb shit like every linux distro using fedora keys which were from microsoft?

    • Hugging Stars@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      9 hours ago

      Microsoft signs Red Hat certs then Red Hat signs everyone’s certs, so the only thing Microsoft can do is to revoke Linux as a whole.

      It’s the solution that requires minimal user effort since most computers are designed for Windows.

      • Appoxo@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        1
        ·
        5 hours ago

        And MS probably won’t do it willy-nilly because their stack is peobably using it to some degree and many more of those Fortune-X00 are very likely something RHEL. So fucking that over will crash their stock like it did with CrowdStrike but much much worse.

        • Masterkraft0r@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 hours ago

          not only likely… i read somewhere that make more money with linux stuff on azure than with anything else they do can’t find the source rn tho

    • sorter_plainview@lemmy.today
      link
      fedilink
      English
      arrow-up
      1
      ·
      13 hours ago

      I think it is just chain of trust. Many used Microslop as the trust authority (may be due to convenience? I have no idea). Debian has a nice page on Secure boot and how it works.