• 0 Posts
  • 7 Comments
Joined 4 months ago
Cake day: March 28th, 2026
  • urushitan 漆たん@kakera.kintsugi.moetoTechnology@lemmy.world•Microsoft’s Secure Boot has been broken for a decade and no one noticed until nowEnglish
    14·
    2 days ago

    Well considering that the “UEFI Shim’s” role is to sit in between a Microsoft owned certificate signing chain, it is certainly part of it’s primary role.

    With Linux distributions supporting UEFI Secure Boot, the above-described Secure Boot mechanism built around Microsoft keys introduces some challenges. Every Linux distribution generates its own bootloader binaries, and each of them has a different hash. Getting every Linux bootloader signed directly by Microsoft would be slow, bureaucratic, and impractical (if not impossible) to maintain across all Linux distributions.

    The solution to this problem is a shim: a small, minimal first-stage bootloader that Microsoft can vet and sign once, and which then creates a secondary trust anchor for the rest of the Linux distribution-specific boot stack – usually GRUB 2 and the Linux kernel. This trust anchor is another certificate, referred to as a vendor certificate (managed by the distribution vendor), added to the shim binary before it is signed by Microsoft.

  • urushitan 漆たん@kakera.kintsugi.moetoSelfhosted@lemmy.world•State of the Discord - A Lesson (r/selfhosted)English
    7·
    3 days ago

    Without having gone on that discord, like most discords, it would be my guess that 80% of the purpose of it is for shitposting, custom emojis, and sharing gifs.

    Ironically few if any self hosted chat platforms share that focus, so that’s likely part of the gap. It’s either irc (very light on features, no ui for administration/customization for those not wanting to use admin text commands), matrix (very heavy, focus on federation, also has many commands that are only through text, very light support for custom emoji or built in gifs), or the crippleware open source business oriented chat platforms like rocketchat, mattermost, or zulip.

    Honestly zulip is probably best but then you get into the wonderful world of mobile push notifications, capped at 10 users or unlimited for “eligible communities” there