What the fuck is an SBAT and why does everyone suddenly care

This site took too long to answer. You can still read it on the original site — the toolbar below keeps your place in the directory.

Short version: Secure Boot Advanced Targeting and if that's enough for you you can skip the rest you're welcome. Long version: When UEFI Secure Boot was specified, everyone involved was, well, a touch naive. The basic security model of Secure Boot is that all the code that ends up running in a kernel-level privileged environment should be validated before execution - the firmware verifies the…

Read on mjg59.dreamwidth.org ↗