• 0 Posts
  • 14 Comments
Joined 10 months ago
cake
Cake day: August 14th, 2025

help-circle




  • It’s just blind perfectionism. Don’t put security features as the first priority above all else? Hunting season is open.

    It’s difficult to argue against their basic policy, especially these days, seeing what AI pentesting can do.

    But at the end of the day, mom and dad are gonna have to use their phones and they do not care about or understand security in the slightest, so how are they supposed to make use of those devices?

    I think a little more positive marketing wouldn’t hurt, but the Graphene people love to call out what everybody else is doing wrong.



  • sigh To actually answer your question:

    Coreboot itself is just init firmware that contains a payload, such as Seabios, GRUB or Tianocore.

    Those can have passwords (or also not, Seabios can’t, as far as I’m aware).

    There’s a Libreboot site on how to lock down GRUB.

    Basically, you have to flash your own config by adding your password hash and replacing the one in the ROM with e.g. cbfstool. It may sound scarier than it is.

    Besides having less features than many proprietary BIOSes, I prefer the flexibility of having your own config to play around with. You can also create custom entries to boot fully encrypted RAIDs and such stuff.

    (I sighed because many answers were about BIOS passwords not being effective anyway, which, to me, is dog shit, because of course you do not want somebody random to be able to just boot a USB from your device and screw up your system. And no, it does not reset itself when you take out the CMOS battery.)






  • Why do they hate people asking questions on this site specifically about asking questions?

    This is literally what I thought multiple times now after posting questions there.

    I have to say that each of the stack-network sites feels a little different. I think it heavily depends on the mods themselves and how they manage it.

    For example, I found the AskUbuntu site very accepting, even to broader questions on Linux and hypothetical issues surrounding it.

    The Electronics Stackexchange I’ve had mixed experiences. Some were very helpful, but others seemingly demanded that I measure every single component with an oscillator and give them the readings, even listing manufacturer specs wasn’t enough, question closed as “not enough info”.

    That’s when I got frustrated, because, why not just leave it open, maybe someone would still be willing to chime in?

    This feels weird to me, because I will not use this site as a scientific researcher with a nerwork of equally educated colleagues, but as a hobbyist, I simply don’t have all the means/knowledge some people expect, so who is the expected userbase?