• Trainguyrom@reddthat.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      Since about Windows 7 each major windows release has been a bunch of new annoying things you have to learn how to work around, and a couple of fixes for older annoying things that now work better. For example, Windows update on 10 and 11 is actually pretty decent at actually updating everything and finding drivers for fairly common hardware. Windows 11 has some nice window management features built in, etc.

      Its easy, just make sure you select the right options during OS setup, hit an unmarked key combination to open a terminal and enter an undocumented command that Microsoft might remove at any moment to bypass certain online/account requirements, uninstall Candy Crush every 6 months or so, enter these registry values to fix the right-click menu, windows search, etc.

      Y’know what, thinking about it, its been about 7 years since I last gave Linux a shot on my primary PC, might be about time to try it again…

  • 9point6@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    This is partly Microsoft’s fault, for sure, but it’s also more of a function of how secureboot works. A Linux system using TPM backed FDE with secureboot enabled would have the same problem going the other way.

    Secureboot prevents a lot of ways the TPM could be compromised, so as part of “securely” turning it off, it wipes the keys (otherwise those protections would be pointless, the first thing an attacker would do would be to turn off secureboot).

    • PlzGivHugs@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      The main problem is it turning itself on with no input from or feedback to the user, and not giving the user access to the key without using a Microsoft account. I’ve heard of people getting screwed by this because they set up with a local account and thus never got their secureboot key (or did, but it was hidden somewhere and they were never told to save it).

      • 9point6@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        4 months ago

        Oh yeah sorry I should have elaborated when I said it’s partly Microsoft’s fault. ATEOTD, this mostly happened because neither of them expected the FDE to be enabled which is on Microsoft for silently enabling it

  • unexposedhazard@discuss.tchncs.de
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    Literally happened to me two days ago. Everything was fine until i installed gpu drivers and then it said “plz give secure boot password” and i had to abort mid install. Also was infront of a fresh linux recruit.

    • Elvith Ma'for@feddit.org
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      That secure boot password was probably from akmods preparing its key so that it can sign the kernel module of the driver. This key needs to be loaded into the UEFI to use the driver with secure boot enabled. It shouldn’t affect the bit locker key in theory, but you never know…

        • Elvith Ma'for@feddit.org
          link
          fedilink
          arrow-up
          0
          ·
          4 months ago

          Set bios to disable secure boot (warning check if you have bitlocker active before you do that) and install Linux w/o secure boot.

          Otherwise, with secureboot: akmod will generate a new key for you and prepare it to be loaded into you UEFI. That key is password protected, which was the password you were asked for. Depending on your distro it might even get loaded automatically on reboot (just follow the menu and enter the password when asked) or you might need to initiate the load with mokutil and a reboot.

          Afterwards, akmods will make sure your graphics driver is signed with the corresponding key that is now known and trusted by the UEFI and you can boot with secure boot enabled while still using self compiled kernel modules.

          Problem is that kernel modules are seen as part of the kernel and everything must be signed with a key your UEFI trusts when using secure boot. And initially it’s Microsoft’s key, which you will not have access to when using custom kernels/kernel modules/… so you just create your own.

  • proti@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    As nice as most distros are, I wouldn’t recommend installing it on Gpa’s/Parent’s PC, simply because if a problem arrives most people won’t be able to give them a fix easily, unless they also know how to use Linux.

    • lime!@feddit.nu
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      i installed mint for my extremely non-technical parent and the only time they have issues is when trying to use windows stuff. so a non-issue.

      • proti@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        4 months ago

        Well, mine was one of the curious ones - once they disconnected from the WiFi and no neighbor could fix it, they had to wait a few days till I came over to help.
        Hopefully Linux market share will improve and you can get lucky, but issues will inevitably happen - if you’re committed and close by, maybe you could try, but it sucks when you’re away

      • DudeDudenson@lemmings.world
        link
        fedilink
        arrow-up
        0
        ·
        4 months ago

        Installed mint for an elderly relative that only uses it for YouTube and email, the only calls I get are when mozzila stops working because the version is too old

  • danzania@infosec.pub
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    Yep, happened with my wife’s laptop. Fortunately you just follow the instructions and we had a second laptop but I was still sweating bullets.

  • lessthanluigi@lemmy.sdf.org
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    That explains why I was just trying to update my friend’s motherboard’s firmware and it locked him out. He had to reinstall his os.

  • Sylvartas@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    4 months ago

    Fuck, I’m gonna have to enable secure boot (and use windows) to play the BF6 open beta, am I gonna get the same buillshit ?

    If it doesn’t affect my Linux drives I don’t care much tbh, I’ll probably just nuke windows and reinstall it

    • bizarroland@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      Even if you enable Secure Boot, you can disable BitLocker, and that will prevent this from happening.

      The only thing BitLocker really does is make it so that if somebody steals your computer and doesn’t have your password, all of your files will be encrypted, so they don’t get your files too.

      Depending on your risk preference, it is okay to disable it.

      Of course, if your computer does not have a password, or if the password is something really easy, then there’s no point in bitlocker in the first place.

    • JigglySackles@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      I was going to try the BF6 open beta. It uses javelin anti cheat which is kernel level and requires secureboot on and active.

      Complain about that in the steam forums though and ignorant troglodytes come out of the muck and filth to screech “cheater! Stupid boomer can’t figure it out!” and other drivel.

    • Derpgon@programming.dev
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      If you use Rufus to burn the ISO into the USB, there is an option to patch the ISO to not require secure boot.

          • Sylvartas@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            0
            ·
            4 months ago

            I basically never boot into windows except to play these anti cheat games with friends anyway, so I’ll just bite the bullet and deal with rebooting twice just to change OS to play the beta, but yeah it’s a weird ass requirement especially since it is apparently quite easy to exploit some vulnerable signed drivers to inject shit into memory anyway.

  • 11111one11111@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    4 months ago

    I want to frame this and hang it on the back of my bathroom door like every framed spiritually motivating quote overlaying a stock photo that every fuckin boomer aged leather ballsack skinned from hitchiking the US cuz their parents asked them to get a job but all the got were the same stds and athletes foot from showering amd fucking in public shitters, kind of hippie. You know the one, cuz their bathroom smells so bad of potpourri your eyes water and you just know everything you eat for the rest of the day is going to taste like that dirty fuckin hippie’s potpour-fuckin-eeee.

    This isnt guna be easy to make this framed picture of green text fantasy work. Guna need to remodel my shitter so every inch is covered in dry flowers, crystals, oils, makeup they stopped making 50 years ago cuz they killed all the test animals from all the uranium and asbestos its made from. Also should prolly start smoking so the white paint on the walls looks like yellow tar textured wall paper from how much hippie hair is stuck to it.

    But for real tho lol, someone should sell on Etsy framed motivational stock photo quotes of all of 4chan’s greatest moments in green text history.

  • Sarothazrom@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    4 months ago

    This is probably my fault, big brother Microsoft saw me replace Win11 last month with Linux and don’t want real OS’s taking up their precious market share.

  • some_guy@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    4 months ago

    I work in IT and understand that the tradeoff for good security is a reduction in convenience. But this really reads like deliberate punishment. I get the same sense on Apple’s platforms. Wanna change your cloud password? Prove you know the unlock code to a device that you no longer own and haven’t had in a year. This is especially awesome when your employer makes you change passcodes on a regular basis and you have no idea what you used back then.

    • Psythik@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      Ran into this issue literally yesterday. The wife went back to iOS after giving Android a try for four years (I don’t get why, but I try not to judge).

      Anyway, she couldn’t remember her Apple ID and had to pull out the phone she hasn’t used in years to recover her account. Thankfully she was smart enough to charge the battery to 50% every few months. Otherwise it would have gone bad and she would have been fucked; literally would have had to pay a tech hundreds to replace a battery for a phone she no longer uses, just to reset a simple password.

      I understand and appreciate the need for good security, but this is beyond ridiculous.

    • floquant@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      It’s not strictly a password, it’s a recovery key for the encryption. The drive is unlocked automatically at boot by the key residing in the TPM, if the system “hasn’t been compromised”

      Bitlocker is enabled by default on new Windows installations, and you can run into this situation by resizing partitions or messing around with your EFI partition. Disabling secure boot without disabling bitlocker first will result in this.

      Make sure you have your recovery key, or completely disable bitlocker until you’re done provisioning your system (or uninstall windows altogether)