Re: [GIT PULL] Load keys from signed PE binaries

Matthew Garrett
2013-02-26T03:48:48Z

On Mon, Feb 25, 2013 at 07:45:24PM -0800, Linus Torvalds wrote:
> On Mon, Feb 25, 2013 at 7:42 PM, Matthew Garrett <mjg59@srcf.ucam.org> wrote:
> >
> > The user Microsoft care about isn't running Linux
>
> How f*cking hard is it for you to understand?
>
> Stop arguing about what MS wants. We do not care. We care bout the
> *user*. You are continually missing the whole point of security, and
> then you make some idiotic arguments about what MS wants you to do.
>
> It's irrelevant. The only thing that matters is what our *users* want
> us to do, and protecting *their* rights. As long as you seem to treat
> this as some kind of "let's please MS, not our users" issue, all your
> arguments are going to be crap.

Our users want to be able to boot Linux. If Microsoft blacklist a
distribution's bootloader, that user isn't going to be able to boot
Linux any more. How does that benefit our users? The user that wants to
explicitly disable the security is free to do so ("mokutil
--disable-validation" as root, follow the prompts, reboot), but if
we only care about *our* users then Microsoft will gleefully blacklist
us into complete irrelevance.

--
Matthew Garrett | mjg59@srcf.ucam.org