Id like to hear thoughts. Of course us gamers hate kernel level anti cheat, but is that actually tied to secureboot?
I know some/most distros can boot in secure mode, so it doesn’t seem like an issue there.
With all the new games moving to it, looks like we will all have to sit them out or install Spyware (microshit) to play. I will opt not to.
Kernal level anticheat is invasive and the vast majority of anticheats are probably installing spyware with root access.
Neither Secure Boot nor TPM were ever actually about security and neither meaningfully improves security. They are DRM features that exist solely to ensure you can never truly own the things you buy.
There’s the truth. Thank you.
Sticking to linux and indie games forever then !
The biggest issue to me is that if you (the OS maker) wants a shim so you can use your own CA, you have to go through Microsoft. And they can just say no.
I think Tuxedo is still waiting on their shim.
It depends. If it’s under your control with your own keys then it can be beneficial. If it’s under someone else’s control (as it is for most people) then it’s a step towards the walled garden.
Secure boot is BS
I’ve avoided kernal anti-cheat basically forever on principle. On the plus side, there is talk about Microsoft kicking 3rd parties out of the kernal on windows, stemming from the cloudstrike debacle. If they kick out anti-virus, I can’t imagine that they let game publishers stay. We might actually see the death of kernal anti-cheat soon.
On a side-note, it’s a really sad state that so much of the world runs on computers but the majority of people don’t know the first thing about using them. It has led us to so many bad places today that I really didn’t expect when I was a teen…
Crowdstrike*
Aw dang it, you’re right. lol
Worst part is everything has to use Microsoft’s signing keys, so it’s ironically a gigantic security hole if your threat model includes being on Microsoft’s shit list.
Only by default. You can load your own keys instead of Microsoft’s, and some Linux distros do just that.
Which makes this requirement even more meaningless because someone who wants to cheat by running a modified kernel will obviously know how to follow a tutorial to add his MOK and sign his version of the kernel.
Yup. All it does is restrict less sophisticated users, but surely they’d also be willing to follow a guide to configure it.