this post was submitted on 08 Aug 2025
493 points (98.1% liked)

Games

41382 readers
1200 users here now

Welcome to the largest gaming community on Lemmy! Discussion for all kinds of games. Video games, tabletop games, card games etc.

Rules

1. Submissions have to be related to games

Video games, tabletop, or otherwise. Posts not related to games will be deleted.

This community is focused on games, of all kinds. Any news item or discussion should be related to gaming in some way.

2. No bigotry or harassment, be civil

No bigotry, hardline stance. Try not to get too heated when entering into a discussion or debate.

We are here to talk and discuss about one of our passions, not fight or be exposed to hate. Posts or responses that are hateful will be deleted to keep the atmosphere good. If repeatedly violated, not only will the comment be deleted but a ban will be handed out as well. We judge each case individually.

3. No excessive self-promotion

Try to keep it to 10% self-promotion / 90% other stuff in your post history.

This is to prevent people from posting for the sole purpose of promoting their own website or social media account.

4. Stay on-topic; no memes, funny videos, giveaways, reposts, or low-effort posts

This community is mostly for discussion and news. Remember to search for the thing you're submitting before posting to see if it's already been posted.

We want to keep the quality of posts high. Therefore, memes, funny videos, low-effort posts and reposts are not allowed. We prohibit giveaways because we cannot be sure that the person holding the giveaway will actually do what they promise.

5. Mark Spoilers and NSFW

Make sure to mark your stuff or it may be removed.

No one wants to be spoiled. Therefore, always mark spoilers. Similarly mark NSFW, in case anyone is browsing in a public space or at work.

6. No linking to piracy

Don't share it here, there are other places to find it. Discussion of piracy is fine.

We don't want us moderators or the admins of lemmy.world to get in trouble for linking to piracy. Therefore, any link to piracy will be removed. Discussion of it is of course allowed.

Authorized Regular Threads

Related communities

PM a mod to add your own

Video games

Generic

Help and suggestions

By platform

By type

By games

Language specific

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] brezel@piefed.social 77 points 3 days ago (1 children)

beautiful. fuck secureboot.

[–] 9tr6gyp3@lemmy.world 25 points 3 days ago (3 children)
[–] brezel@piefed.social 106 points 3 days ago (32 children)
  • some people run more than 1 OS
  • some people actually program and need to load unsigned shit all the time
  • some people have legacy hardware that doesn't run with secureboot
  • it is my decision and my decision alone how i boot my operating systems. not EA's.
load more comments (32 replies)
[–] Kyrgizion@lemmy.world 33 points 3 days ago (2 children)

Needlessly intrusive. Can obviously be circumvented by cheaters anyway, so quite possibly superfluous. Apart from that it protects against the kinds of attacks that typically require physical access to the computer. If you have physical access you have full access anyway. Etc.

[–] 9tr6gyp3@lemmy.world 19 points 3 days ago (2 children)

If you have physical access you have full access anyway. Etc.

You know secure boot was specifically made to protect users for this exact use case. Any tampering of the system will prevent the system from booting.

[–] Eggymatrix@sh.itjust.works 9 points 3 days ago (1 children)

I get your pc, "tamper" it, then i install a fake bios that tells you all is well and that your tpm and secureboot and whatever else bullcrap they invent is still happy.

See the problem?

[–] Corngood@lemmy.ml 5 points 3 days ago (2 children)

It won't boot though, because the keys to decrypt the system are stored in the TPM.

Sure you could replace the whole OS, but that's going to be very obvious and won't allow you access to the data.

[–] jjjalljs@ttrpg.network 10 points 3 days ago (2 children)

If you have physical access you could go into the bios and turn off secure boot

[–] PHLAK@lemmy.world 5 points 3 days ago (2 children)

If you enable Secure Boot you should also set a BIOS password for this very reason.

[–] Saleh@feddit.org 11 points 3 days ago

So, if you set a bios password either way, which benefit does secureboot give?

[–] jjjalljs@ttrpg.network 4 points 3 days ago (1 children)

I think you can reset a bios password by taking the CMOS battery out or something?

[–] AlphaOmega@lemmy.world 4 points 3 days ago

Not sure if this works these days, but on older systems there was a reset bios config jumper and pulling the cmos battery.

[–] Miaou@jlai.lu 1 points 2 days ago (1 children)

Can't access the bios with secure boot on (at least I could not on an old laptop I was refurbishing, thank god the owner could login into windows)

[–] jjjalljs@ttrpg.network 1 points 2 days ago

That's unusual, I think. Every computer I've had that had it on, I was able to turn it off when I went to install Linux.

load more comments (1 replies)
[–] Limonene@lemmy.world 3 points 3 days ago (1 children)

A person with physical access can tamper with the OS, then tamper with the signing keys. Most secure boot systems allow you to install keys.

Secure boot can't detect a USB keylogger. Nothing can.

[–] 9tr6gyp3@lemmy.world 1 points 2 days ago (1 children)

The signature checks will immediately fail if ANY tampering has occurred.

Adding a USB keylogger that has not been signed will cause a signature verification failure during boot.

[–] Limonene@lemmy.world 2 points 2 days ago (1 children)

A USB keylogger is not detectable by the computer, not in firmware nor operating system. It passively sniffs the traffic between the USB keyboard and the computer, to be dumped out later.

[–] 9tr6gyp3@lemmy.world 1 points 2 days ago

If your keys are stored in the TPM for use during the secure boot phase, there will be nothing for it to log.

load more comments (1 replies)
[–] SoupBrick@pawb.social 13 points 3 days ago (7 children)

It fucks with Linux. I literally just disabled it to resolve a driver install issue before this announcement was made.

[–] 9tr6gyp3@lemmy.world 7 points 3 days ago

Linux can run with secure boot just fine though. Use your distros documentation to set it up.

load more comments (6 replies)