this post was submitted on 10 Jun 2024
703 points (99.3% liked)
Technology
59600 readers
4255 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Microsoft should also be to blame here. Sending BIOS updates via automatic windows updates should not be a thing.
The alternative is that BIOS updates simply never get applied.
Which is better than bricking a machine
Not sure when the sentiment changed, but it used to be heavily recommended against updating the bios on any computer unless there was a specific feature or fix your computer needed.
Sentiment changed when the "BIOS" became a component for enforcing security architecture via "SecureBoot" and also Bitlocker sealed to PCRs only does so much if the BIOS code is vulnerable. Now they really badly want a "trusted" chain from some root of trust until the OS bootloader takes over. Problem is that the developers have historically enjoyed being in a trusted, single user context for decades and so the firmware has been full of holes when actually pushed.
That's a better alternative...