11–20 of 37 posts
This would make a huge difference in battery life for Linux laptops with secure boot enabled. Lots of modern laptops don’t even properly support S3 sleep properly (looking at you dell) and want to be able to hibernate to save power.
Is this only true of Windows hardware, or does it include hardware designed for Linux?
Earlier quoted context omitted.
Is this only true of Windows hardware, or does it include hardware designed for Linux?
Does consumer hardware designed for linux even exist? Even bigger shops like system76 buy preconfigured laptops and install coreboot and PopOS! on it.
This would make a huge difference in battery life for Linux laptops with secure boot enabled. Lots of modern laptops don’t even properly support S3 sleep properly (looking at you dell) and want to be able to hibernate to save power.
> Lots of modern laptops don’t even properly support S3 sleep properly (looking at you dell) and want to be able to hibernate to save power. "modern standby" is such a scam and shit show. And completely opposite that, I was a bit shocked how aggressive modern macos (at least on M1 machines) are at hibernating, I have had to get used to `caffeinate` long-running process because on battery if that's not in use as soon…
Earlier quoted context omitted.
That doesn't actually protect against that attack, though. The evil maid just steals the guts of your computer and replaces them with ones that always say "sorry, wrong password", while exfiltrating the password you tried over Wi-Fi or Bluetooth. Then they use your password to decrypt your unmodified hard drive with your unmodified TPM on your unmodified motherboard. Also, I don't think this is true: > That TPM gets…
In a high security situation. It would not be a password, but a smartcard which authenticates the device before providing its key, and the device authenticating the smartcard. Edit: For the purposes of the Networked Evil Maid Attacks. Mutual Authentication (of device and user) is currently the purpose of research. It has not needed to be implemented yet as the regular Evil Maid is still possible due to the fact that…
Earlier quoted context omitted.
> Lots of modern laptops don’t even properly support S3 sleep properly (looking at you dell) and want to be able to hibernate to save power. "modern standby" is such a scam and shit show. And completely opposite that, I was a bit shocked how aggressive modern macos (at least on M1 machines) are at hibernating, I have had to get used to `caffeinate` long-running process because on battery if that's not in use as soon…
Serious question: i'm back at daily driving macOS at work after using other platforms for a while. Caffeine vs Amphetamine (app), whats the preferred one these days?
I'm pretty sure they both work through the standard power assertions API[0], so nothing precludes having both (in fact if you have amphetamine you necessarily have both) and using whichever's more convenient for your needs at any time.
Unlike AlDente (versus native) there should not be any conflict between caffeinate and amphetamine, because both simply signal to the system that some forms of sleep / power saving should not be used. If caffeinate says the disks can't idle-sleep and amphetamine says the system can't idle sleep, then neither will happen and that's that.
[0] https://developer.apple.com/documentation/iokit/iopmlib_h
Earlier quoted context omitted.
You have a disk encrypted laptop. That key is protected by a password. Secure boot means that when you log in you can trust that the disk decryption screen is not a disk encryption key exfiltration screen waiting for you to enter your password so that a disk backup taken earlier can be decrypted. How? The disk encryption is based on a key in the TPM which only is decrypted with your password. That TPM gets wiped when…
That doesn't actually protect against that attack, though. The evil maid just steals the guts of your computer and replaces them with ones that always say "sorry, wrong password", while exfiltrating the password you tried over Wi-Fi or Bluetooth. Then they use your password to decrypt your unmodified hard drive with your unmodified TPM on your unmodified motherboard. Also, I don't think this is true: > That TPM gets…
FYI: The tone of your original question suggests that you might have prepared responses to any answers you might receive about secure boot and kernel lockdown. If that’s the case, maybe a comment tree isn’t the correct forum for having a discussion about it because of the inherent information inequity.
This would make a huge difference in battery life for Linux laptops with secure boot enabled. Lots of modern laptops don’t even properly support S3 sleep properly (looking at you dell) and want to be able to hibernate to save power.
> Lots of modern laptops don’t even properly support S3 sleep properly (looking at you dell) and want to be able to hibernate to save power. "modern standby" is such a scam and shit show. And completely opposite that, I was a bit shocked how aggressive modern macos (at least on M1 machines) are at hibernating, I have had to get used to `caffeinate` long-running process because on battery if that's not in use as soon…
On x86, maybe. Try booting an M1 Mac, turning off the screen (without closing the lid - that's what makes it go to sleep instantly), SSHing in, and running a shell loop that prints out the date every minute.
I left it running and the thing didn't even drop from 100% battery after 3 hours, when macOS finally decided to go into real standby and that killed the connection. Did it for another 3 hours and I was at 98%. That's 2% battery usage per 3 hours for a system with an OS running, active WiFi, and an open TCP connection.
"Modern standby" works when your hardware has good power management.
FWIW, I've never seen an M1 go into hibernation other than when the battery is about to die. The normal lid closed state is true sleep, not hibernation. You can tell because waking up from actual hibernation actually takes a progress bar and a few seconds.
Earlier quoted context omitted.
Is this only true of Windows hardware, or does it include hardware designed for Linux?
Does consumer hardware designed for linux even exist? Even bigger shops like system76 buy preconfigured laptops and install coreboot and PopOS! on it.
Of course, their Thelio hardware is very much not just a rebranded white box vendor. :)
I agree it could be better. It'd be really nice if the Linux hardware vendors had sufficient pull with the odms to get even more Linux didn't designs put together. Buying Windows hardware and putting Linux on it, however--even if you're waiting for some day when the better situation has arisen--, is actively working _against_ that goal.
Earlier quoted context omitted.
Does consumer hardware designed for linux even exist? Even bigger shops like system76 buy preconfigured laptops and install coreboot and PopOS! on it.
Yes. System76 partnered with Clevo to do their laptops, but it's not the exact same hardware as when you buy Clevo directly. E.g. https://twitter.com/jeremy_soller/status/1322954964549824512 I recall also discussing this with them when I was waiting for a laptop to get refreshed. There were working with Clevo to get some firmware issue fixed before they would ship it. Of course, their Thelio hardware is very much not…