• 0 Posts
  • 61 Comments
Joined 10 months ago
cake
Cake day: August 14th, 2025

help-circle



  • ExtremeUnicorn@feddit.orgtoFunny@sh.itjust.worksThanks Google
    link
    fedilink
    arrow-up
    2
    arrow-down
    2
    ·
    14 days ago

    I get the frustration and I don’t think it’s fair to downvote somebody just because they don’t conform to your opinion.

    But with the overhyped shitshow LLMs have been so far, I also understand the hate against them. I mean, while not being real, this screenshot seems quite believable, because any user has seen something like this already.







  • It’s just blind perfectionism. Don’t put security features as the first priority above all else? Hunting season is open.

    It’s difficult to argue against their basic policy, especially these days, seeing what AI pentesting can do.

    But at the end of the day, mom and dad are gonna have to use their phones and they do not care about or understand security in the slightest, so how are they supposed to make use of those devices?

    I think a little more positive marketing wouldn’t hurt, but the Graphene people love to call out what everybody else is doing wrong.



  • Yeah, don’t do that.

    You may have been lucky, but the testing repository is really not meant for daily use.

    Noone cares about packages there, so depending on what you have installed and when you update, you might have critical security vulnerabilities that have been patched for weeks on Stable or other incompatibilities/broken dependencies.

    Unstable is not meant for daily use either, but at least you brainlessly get pushed the latest updates at all times. I have used it for a while, but it broke on me, too.

    If you need newer software, just use Stable with backports or Flatpaks.



  • sigh To actually answer your question:

    Coreboot itself is just init firmware that contains a payload, such as Seabios, GRUB or Tianocore.

    Those can have passwords (or also not, Seabios can’t, as far as I’m aware).

    There’s a Libreboot site on how to lock down GRUB.

    Basically, you have to flash your own config by adding your password hash and replacing the one in the ROM with e.g. cbfstool. It may sound scarier than it is.

    Besides having less features than many proprietary BIOSes, I prefer the flexibility of having your own config to play around with. You can also create custom entries to boot fully encrypted RAIDs and such stuff.

    (I sighed because many answers were about BIOS passwords not being effective anyway, which, to me, is dog shit, because of course you do not want somebody random to be able to just boot a USB from your device and screw up your system. And no, it does not reset itself when you take out the CMOS battery.)