**inference** @inference@plr.inferencium.net · Jul 16, 2022, 10:15

**inference** @inference@plr.inferencium.net · Jul 16, 2022, 10:15

inference @inference@plr.inferencium.net

Jul 16, 2022, 10:15

inference @inference@plr.inferencium.net

@iska @safiuddinkhan @cyberspook @m0xee @dushman Verified boot does not exist in normal PCs. Verified boot is not the same as secure boot, it is an extra layer above which protects the OS integrity, not just checking the bootloader signature. You are very wrong.

**inference** @inference@plr.inferencium.net · Jul 16, 2022, 10:15

**inference** @inference@plr.inferencium.net · Jul 16, 2022, 10:15

Jul 16, 2022, 10:15

inference @inference@plr.inferencium.net

@iska @cyberspook @dushman @m0xee @safiuddinkhan Only macOS and Chrome OS have verified boot.

**m0xEE** @m0xee@librem.one · 2022-07-16T10:28:58Z

m0xEE @m0xee@librem.one

@inference @safiuddinkhan@fosstodon.org @cyberspook @iska@mstdn.starnix.network @dushman What's with the TPM 2.0 requirement of Windows then? Is it to verify bootloader only? I don't think so.
They've made it mandatory in Windows 11 only, but it was there way earlier than that.

Jul 16, 2022, 10:28 · Web · · ·

**inference** @inference@plr.inferencium.net · Jul 16, 2022, 10:42

**inference** @inference@plr.inferencium.net · Jul 16, 2022, 10:42

Jul 16, 2022, 10:42

inference @inference@plr.inferencium.net

@m0xee @safiuddinkhan @cyberspook @iska @dushman Yes, it's for secure boot. Windows root filesystem is modifiable, so it cannot have integrity checking.

Verified boot locks the root FS as read-only, so malware and corruption cannot persist. It is restored to its previous state on reboot.