undefined | Better HN

0 pointsbayindirh5mo ago0 comments

No, the issue is too much of the Secure Boot chain is currently being controlled by Microsoft.

Kernel being GPL has no point currently. Require hardware attestation with Microsoft private keys + systemd-boot + systemd + uutils can create a nice walled garden, allowing "vendors" to build locked-down hardware-OS pairs.

More importantly, uutils is MIT, which can attest at every level, without sharing a line of source code.

This will affect everything from small appliances to big iron and it can be very ugly.

0 comments

deadbunny5mo ago

You don't have to use MS' keys, you can setup secure boot using your own keys reasonably easily.

https://wiki.archlinux.org/title/Unified_Extensible_Firmware...

bayindirhOP5mo ago

I know. The question is not about what’s possible today.

What prevents Microsoft from updating Windows PC standards and eliminate the possibility of turning off secure boot and allowance of enrolling your own keychain in the secure boot process?

These are long games. Being comfortable today doesn’t guarantee same comfort and allowances tomorrow.

Ironically, we’re discussing this under Android’s increasing restrictions.

The same Android which was championed as the bastion of mobile freedom when it first came out.

symbogra5mo ago

It goes back to the old arguments about free software vs open source. Maybe by restricting devs in certain ways the users are actually more free. But then maybe the system to lock the users in gets built with wholly proprietary software and there's less adoption overall of the FOSS software. I don't really have a good answer. I recently switched to grapheneOS but it feels like fighting a losing battle, and lots of apps don't like that I'm using a non official android build.

I worked at a big company where GPLv2 software could be used in our systems but not GPLv3. Is it better that that GPLv3 software didn't have more users? The company didn't contribute much back so maybe it's not a big loss.

bitwize5mo ago

Uutils is literally one guy's self-tutorial to learn Rust. The fact that it's breaking Ubuntu has more to do with that than some shadowy conspiracy.

bayindirhOP5mo ago

Looking at the uutils/coreutils repository:

    - 22K stars
    - 1600+ forks
    - 33 releases
    - 622 contributors
    - 678 users (at minimum)
    - Code of conduct (with a debian.org mailing address nonetheless)
    - 1 distribution shipping it as default (so far)

The project has the stated goal as follows [0]:

> The uutils project reimplements ubiquitous command line utilities in Rust. Our goal is to modernize the utils, while retaining full compatibility with the existing utilities. We are planning to replace all essential Linux tools.

This is hell of a self-tutorial.

If this was GPL licensed, I'd love to try these. But at this point, it's looking for pushing GNU out of the Linux ecosystem, completely.

[0]: https://uutils.github.io/

j / k navigate · click thread line to collapse

0 comments

deadbunny5mo ago

You don't have to use MS' keys, you can setup secure boot using your own keys reasonably easily.

https://wiki.archlinux.org/title/Unified_Extensible_Firmware...

bayindirhOP5mo ago

I know. The question is not about what’s possible today.

What prevents Microsoft from updating Windows PC standards and eliminate the possibility of turning off secure boot and allowance of enrolling your own keychain in the secure boot process?

These are long games. Being comfortable today doesn’t guarantee same comfort and allowances tomorrow.

Ironically, we’re discussing this under Android’s increasing restrictions.

The same Android which was championed as the bastion of mobile freedom when it first came out.

symbogra5mo ago

bitwize5mo ago

Uutils is literally one guy's self-tutorial to learn Rust. The fact that it's breaking Ubuntu has more to do with that than some shadowy conspiracy.

bayindirhOP5mo ago

Looking at the uutils/coreutils repository:

    - 22K stars
    - 1600+ forks
    - 33 releases
    - 622 contributors
    - 678 users (at minimum)
    - Code of conduct (with a debian.org mailing address nonetheless)
    - 1 distribution shipping it as default (so far)

The project has the stated goal as follows [0]:

This is hell of a self-tutorial.

If this was GPL licensed, I'd love to try these. But at this point, it's looking for pushing GNU out of the Linux ecosystem, completely.

[0]: https://uutils.github.io/

j / k navigate · click thread line to collapse