MIcrosoft Update pooches grub on dual boot...

[Eadwine Rose]

Unfortunately, some things will not run properly in a VM, like updating my TomTom. Nearly lost the thing back when I had it connected to the VM and updating, absolute nono to disconnect the apparatus then, and the VM decided to toss it out of the system.

Nearly gave me a heart attack. I managed to get it back somehow, but that was the last time I connected it with a VM and went straight back to the actual brick. No more VM for me.

[FullScale4Me]

17 Google alerts on 'Dual Boot' just in the last 2 days.

[dreamer]

These two paragraphs from ArsTechnica explain why Secure Boot is a pretty broken system.

https://arstechnica.com/security/2024/0 ... nux-users/
(comment section)

Secure Boot is mostly a mess, IMO, because the key management sucks so badly that nobody (statistically speaking!) even tries to manage their own keys. Instead, everyone relies on Microsoft's keys shipping with the system and Microsoft signing the boot loader (or shim).

If the install process for other OSs could also safely and reliably enroll their own keys and sign their own distributions, Microsoft could just stick to their own business.

https://arstechnica.com/security/2024/0 ... ce-makers/

Why OEM keys might not be trustworthy:

On Thursday, researchers from security firm Binarly revealed that Secure Boot is completely compromised on more than 200 device models sold by Acer, Dell, Gigabyte, Intel, and Supermicro. The cause: a cryptographic key underpinning Secure Boot on those models that was compromised in 2022. In a public GitHub repository committed in December of that year, someone working for multiple US-based device manufacturers published what’s known as a platform key, the cryptographic key that forms the root-of-trust anchor between the hardware device and the firmware that runs on it.

[Zeke]

An interesting read here ... with a link to a possible solution ... maybe it could help.
https://news.itsfoss.com/windows-breaks ... dual-boot/

[FullScale4Me]

August 2024 security update might impact Linux boot in dual-boot setup devices Microsoft Learn. ( https://learn.microsoft.com/en-us/ )

[davidy]

This is why clonezilla exists. Gotta smack gates back to hell where he and his abominatuion of an OS belongs. I bought a pc specifically to isolate windows so I would never have this problem. Considering the way it's been updating since 7 it was just a matter of time and totally predictable at that. I remember running tomtom an my windows phone with a sirfstar gps chip. Sold that phone over 10 years ago.
And btw, "secureboot" is a scam and always has been. Like 2FA, it's a fear you never knew you had til they told you you did.

[FullScale4Me]

Microsoft shares temp fix for Linux boot issues on dual-boot systems

[Eadwine Rose]

For as far as I know, I never got the update. For kicks, I ran that second command, and the secure boot check:

Code: Select all

eadwine@eadwineMX23:~
$ mokutil --list-sbat-revocations
SbatLevelRT is empty

Code: Select all

eadwine@eadwineMX23:~
$ mokutil --sb-state
SecureBoot disabled
Platform is in Setup Mode

As far as I care, it can stay nicely disabled while I am running this win10 thing alongside.