• onlinepersona@programming.dev
    link
    fedilink
    English
    arrow-up
    7
    ·
    10 months ago

    MBR is so easy to understand. UEFI, has so many things to understand EFI, ESP, MOK, signing procedures and signing chains, … it’s just so darn complicated.

    • cley_faye@lemmy.world
      link
      fedilink
      arrow-up
      10
      ·
      10 months ago
      • Disable secureboot
      • Things just work

      And in the end you just remove the need for a physical attacker to use whatever vulnerability there is in your EFI implementation anyway.

      • 0x4E4F@sh.itjust.worksOP
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 months ago

        Things just work

        Yeah, if you have only one OS. Or when you have more than one, but the other one doesn’t constantly try to fuck up the first one.

        MBR is easy in this regard. Windows never touches the MBR magic, even when updating, so it’s all good. GRUB keeps the MBR in check, Windows doesn’t meddle, everything’s hunky dory in MBR boot land.