To any future reader: this person is a bot farming rage. They are a new account and, according to their comment history, they believe non-white people are genetically predisposed to steal, and poor people are predisposed to rape.

I’m imagining gas price during JFK’s presidency and during The Orange One’s ““presidency””

I can’t even enable it because I have an nvidia card that doesn’t support the new ““open source”” driver, so I’m always loading tainted binary blobs.

I have yet to see a machine that doesn’t have a tainted kernel (meaning the kernel wasn’t signed, a module wasn’t signed, or both) in the wild. Not even with Ubuntu.

At the same time, requiring TPM 2.0 is the same anti consumer thing Win11 did.

Secure boot is a pain to set up on Linux because it was never meant to be for Linux. It’s a Microsoft invention that Microsoft holds the keys for.

Kexec is useful on a lot of machines for faster reboot times, and disabling it can make them significantly longer.

LSM BPF is scary and sketchy, especially if you’re giving a proprietary blackbox access to it. You should not have random software accessing that.

“oh, why are people against the fascist company, they just did something cool another marketing stunt!”

You can have an encryption key that can’t decrypt the data. That’s what public and private keys are. The device can have a public key to encrypt the data, and then it can only be decrypted with the attacker’s private key. No need to even get it out of the device, you can also perform the decryption on the same device. Just don’t store the private key in there.