• 5 Posts
  • 326 Comments
Joined 2 years ago
cake
Cake day: October 9th, 2023

help-circle

  • As always, the answer is “depends”. It shouldn’t hurt unless you’re dual-booting windows (they used it last year as a weapon in their “mess up grub” game), but, Imo, it’s worth the trouble if:

    • your data is also encrypted – otherwise one just removes the HDD/SSD and reads what they need;
    • you provision your own keys – to not depend on Microsoft signing shims for you;
    • you delete the already provisioned keys – Microsoft signed a few vulnerable things, like one kaspersky’s (iirc) live CD with grub not locked down, so one can boot up literally anything anyway;
    • you lock down grub or whatever bootloader you’re using – otherwise you become that vulnerable live cd;
    • you password lock the uefi – otherwise one can simply disable the secureboot;
    • your vendor’s implementation isn’t terribly buggy – iirc, some MSI laptops would just ignore all the discrepancies.

    So, a lot of ifs, and a necessity to store the uefi password somewhere safe, as those may be a pita to reset.

    As for standalone stuff – idk, it might protect you from malware injecting itself into the bootloader or something, but given there’s likely no chain of trust (I.e. the bootloader doesn’t check what it bootloads), it can move in on some later step.














  • To me it looks more like they’re saying they’ll monetize their work no matter what, tho. One way is through direct payments by those who consider their articles worth paying for, then they don’t need to sell userdata or show ads; the other way is selling userdata. Well, there’s also non-targeted advertising, but mb it doesn’t worth as much or something (and targeted ads already pay close to nothing from a single viewer, afaik).

    Where I personally draw the line is when such subscriptions still include ads (looking at you, “ad-free” disney+) or have unnecessarily large costs and so on. I mean, if they charge close to what they’re making with ads and selling data, we could get most websites ~tracker-free for probably a couple of bucks a month each. This, in turn, lessens the power of ad network owners, which again makes the web better. Although, mb I’m idealizing too much, idk.