• boreengreen@lemm.ee
    link
    fedilink
    English
    arrow-up
    64
    ·
    17 hours ago

    The world would be a better place if locked bootloaders were not a thing. I agree that there needs to be laws in place to prevent the sale of these devices.

    • henfredemars@infosec.pub
      link
      fedilink
      English
      arrow-up
      17
      ·
      12 hours ago

      I don’t have a problem with boot loaders doing cryptographic checks in general, as long as the ultimate decision lies with the device owner.

    • Cocodapuf@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      6 hours ago

      How do you feel about locked bootloader’s on game consoles?

      I figure this is one of those edge cases people might fall on either side of. But consoles are also a really large segment of the tech market, so it’s worth thinking about.

      • Abnorc@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        ·
        6 hours ago

        I feel like consoles are targeted at a section of the population that doesn’t value freedom over how they use their hardware. Locked bootloaders on consoles are technically not good, but it’s almost like it’s part of what defines a game console. If it really valued the users freedom, it’d just be a PC. The steam deck and similar devices are changing that idea though.

        • Cocodapuf@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          3 hours ago

          I feel like consoles are targeted at a section of the population that doesn’t value freedom over how they use their hardware.

          Well I don’t think I really believe that. Certainly, I don’t think gamers care less about technical freedom than other groups, say for example users of iOS devices, or smart TVs, or routers, or car entertainment systems. Most of those are pretty locked down, but I don’t think a lack of caring on the user’s part has much to do with that.

          but it’s almost like it’s part of what defines a game console.

          I do think you’re absolutely right about that. A console is supposed to be plug and play. You plug in a controller, and you can play your games. You shouldn’t have to worry about drivers, software updates, system specs, whatever; the games just work.

          (Admittedly, this has been shifting lately, with constant software updates and different editions of the same console. But I think the point still essentially holds true.)

          But yeah, once you start opening up the platform, making it easy to tinker with, suddenly total compatibility can be harder to guarantee, much like it is with Android.

      • Something Burger 🍔@jlai.lu
        link
        fedilink
        English
        arrow-up
        6
        ·
        7 hours ago

        The PS3 used to have an unlocked bootloader with official Linux support. Sony removed it because of piracy. Of course, piracy is still possible, but as always, it’s only an excuse to exert more control over customers.

    • Zak@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      50
      ·
      17 hours ago

      Locked in the technical sense of being able to verify the operating system isn’t a bad thing. The problem is when the device owner can’t add signing keys of their choice.

      The latter is what GrapheneOS does.

      • Corngood
        link
        fedilink
        English
        arrow-up
        19
        ·
        15 hours ago

        Something that worries me about that is attestation. This is the advice from the GrapheneOS Devs:

        https://grapheneos.org/articles/attestation-compatibility-guide

        They’re asking app developers to trust their keys specifically, which would mean that the app might work on GrapheneOS, but not my fork of GrapheneOS with some cherry picked fix I want.

        It would be much better if we stamped this out now, before all online services require attestation.

        • Zak@lemmy.worldOP
          link
          fedilink
          English
          arrow-up
          7
          ·
          13 hours ago

          Agreed. Microsoft proposed something along those lines under the name “Palladium” a couple decades ago and was widely criticized, even in the mainstream press. Apple and Google doing the same thing to our phones barely got a whimper.