On Fri, 2024-08-23 at 11:26 -0400, Neal Becker wrote:
I ran across this article that has some good info: https://www.xda-developers.com/6-bios-settings-every-new-pc-builder-needs-to...
I have a bit of an issue with overly simplistic statements like this:
"Secure Boot, one of the most important security features on modern hardware. It checks all the installed software to ensure it can be trusted before the computer boots up, including UEFI firmware drivers, EFI applications, and the installed operating system. Enabling it helps keep you safe from malware"
Most of us, here, I hope know that only really refers to checking that packages are signed to be authenticate and came from a trustworthy source. The less knowledgeable will think it checks that the software is safe to run. It doesn't check its "goodness," so to speak.
Reminds me of the comments you get from people "but I had anti-virus installed" when their systems turns its toes up after they've deliberately ran pirated, or pirating, software. It ain't magic, but it tries to engender too much blind faith.