Comment Re:Microsoft issues the Linux keys too (Score 1) 80
Bullshit.
About the only thing secure boot really protects from is the evil-maid. All other cases affecting most users by the time something is in a position to modify the kernel or boot loader it was already in a position to do all the damage that would matter to that person.
You had root on my box, you have already had the opportunity to crypto ransom me, just vandalize my system in general, find and extract any sensitive data in my home directories and on any mounted volumes.
Even advanced persistent threats for the most part are not going to be trying to spliot the pre-boot environment, if I want dwell time on a corporate network I want to compromise assets that are usually always online.
In fact I would suggest for most users of home PCs anyway (to include laptops that rarely if ever travel) are less secure for using secure boot and even FDE. Most of them are one bad update or certificate expiration away from rendering their data completely inaccessible and unrecoverable. We know most of these users have no backups, and the tiny percentage who do have never tested them. -That is the opposite of security folks.
FDE does make sense for corporate environments and secureboot probably does as well but it has not f***king business at home and should NEVER be acceptable as being part of any requirement. It serves only one real use there denying people freedom to do what they like with their own hardware. It does nothing but enable DRM, and it does so at the cost of massive potential harm to the end user.