Microsoft man Lennart Poettering recommends everything here that the community has been warning against for years. E.G.: TPM, fido2, UEFI SecureBoot.
Microsoft-Mann Lennart Poettering empfiehlt hier alles, wovor die Community seit jahren warnt. Z.B.: TPM, fido2, UEFI SecureBoot.
"The encryption key should be bound to the TPM device; i.e system data should be locked to a security concept belonging to the system, not the user."
Fuck you, Lennart
https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html
#Poettering #systemd
Data /
npub1hs…k9n78
2023-11-25 21:09:52
Author Public Key
npub1hshnpjapfnrxexqcwpgkuawm0t0yrwefqju0g9frq8r0qsa6erusmk9n78Published at
2023-11-25 21:09:52Event JSON
{
"id": "0435be9c8df4416638c44470423d41b64b84aad5b249a1c87ab218a1d02f0175",
"pubkey": "bc2f30cba14cc66c981870516e75db7ade41bb2904b8f4152301c6f043bac8f9",
"created_at": 1700942992,
"kind": 1,
"tags": [
[
"t",
"poettering"
],
[
"t",
"systemd"
],
[
"proxy",
"https://freespeechextremist.com/objects/b4940e3b-3b9e-4999-89eb-f73735efcf5e",
"activitypub"
]
],
"content": "Microsoft man Lennart Poettering recommends everything here that the community has been warning against for years. E.G.: TPM, fido2, UEFI SecureBoot.\n\nMicrosoft-Mann Lennart Poettering empfiehlt hier alles, wovor die Community seit jahren warnt. Z.B.: TPM, fido2, UEFI SecureBoot.\n\n\"The encryption key should be bound to the TPM device; i.e system data should be locked to a security concept belonging to the system, not the user.\"\n\nFuck you, Lennart\n\nhttps://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html\n\n#Poettering #systemd",
"sig": "cc0545270f503779d89ee1264a3520cc667ba65eb2ed98787c3a099c33b7d733fb875907bbd82663d1878ecdad4515d605303e0a30ca7d606610dced0e41f41d"
}