Re: [gentoo-user] [OT] Should I be worried that I won't be able to dual boot in Gentoo?

[Michael Mol]

On Mon, Sep 26, 2011 at 11:54 AM, Indi <thebeelzebubtrigger@×××××.com> wrote:
> On Mon, 26 Sep 2011 20:56:20 +0530
> Nilesh Govindarajan <contact@××××××××.com> wrote:
>
> As this is being touted a win8 feature (with win8 set for release
> sometime in 2012), I predict this will be defeated before the first
> win8 machine hits the stores -- just like product keys, slic, and wga.
> Also it's probably safe to predict this "secure boot" scheme will end up
> being another vector for windows malware.

Actually, that's the point of it; the BIOS doesn't allow programmatic
manipulation, and would refuse to load unsigned bootloaders. As long
as the system doesn't have the 'secure boot' feature disabled, the
only way for malware to get into the bootloader section will be if
it's signed with the keys in BIOS.

I don't know if this will go the way of Palladium and the TPM. Adding
it to the Windows8 certification program gives it some weight; OEMs
like being able to put those stickers on their hardware. If Microsoft
makes certification necessary for OEM bulk keys, the'll have a great
deal of leverage. On the other hand, they make push OEMs over the edge
to try Linux systems in retail again. (Yes, I realize that'll only
happen if Steam and friends become truly trivial to run on Linux)

-- 
:wq