New Lenovo AMD Laptops With Pluton Co-Processor Reportedly Only Boot Windows By Default

[phoronix]

Phoronix: New Lenovo AMD Laptops With Pluton Co-Processor Reportedly Only Boot Windows By Default

At least some of Lenovo's new AMD Rembrandt powered laptops with Microsoft Pluton security co-processor are set by default to only trust Microsoft's key and not the Microsoft 3rd Party UEFI CA Key that Linux distributions and others use for UEFI Secure Boot support. Thus by default only Microsoft Windows will boot with the default firmware configuration on some new Lenovo laptops...

https://www.phoronix.com/scan.php?page=news_item&px=Lenovo-Pluton-Windows-Default

[Paradigm Shifter]

"Distrusting the 3rd party CA by default doesn't improve security, it just makes it harder for users to boot alternative operating systems."

Which was the whole point.

[tildearrow]

"Sign in with your Microsoft account to boot Linux" may even become true one day... Oh no!

[MorrisS.]

Lenovo could propose a laptop based on one of the most reliable linux operating system.

[anarki2]

How is this even news? Most motherboards have the as the default. Have you never seen a computer?

[anarki2]

[/I]
Which was the whole point.

That's like saying HTTPS is useless because the user can "trust" invalid certificates.

That's how chain of trust works. We don't know anything better, there has to be some kind of designated authority.

[DanL]

How is this even news? Most motherboards have the as the default. Have you never seen a computer?

No. SecureBoot is enabled by default on most motherboards, but they can still boot Linux or other OS's with the proper signature. This is (bad) news.

[Volta]

Hopefully this will be bucket of cold water on Linus head which is becoming dumber and dumber with age.

[Smurphy]

Hopefully this will be bucket of cold water on Linus head which is becoming dumber and dumber with age.

This is an interesting comment.
So you literally say that agreeing with Microsoft is what Linus needs to do?
iMHO Linus is just tired of explaining over and over things to stupid people who do not want to listen (or can't understand).
Just remember: Ignorance is curable, stupidity is permanent.
After a while you just stop trying to adapt.

[Paradigm Shifter]

That's like saying HTTPS is useless because the user can "trust" invalid certificates.

That's how chain of trust works. We don't know anything better, there has to be some kind of designated authority.

The trusted authority is the Microsoft signed "3rd party" certificate for other operating systems to use.

Which was the bodged together hack resulting from SecureBoot and Microsoft apparently being handed the keys to the kingdom with TPM/SecureBoot, so that other OSes could boot.