mjg59

If an authority on a topic says something and someone with no demonstrated experience on that topic disagrees with them without providing any evidence, that's not really an argument to authority kind of situation.

Oh, sorry, I didn't answer the other part of your comment. Network is required so you can boot from the network, which is commonly used for reimaging systems (not just servers, it's often done for laptops in enterprise environments). Non-keyboard input is a necessity for any devices that don't have a keyboard, but mouse input is also just what users expect these days.

No, no modern OS uses any BIOS calls on UEFI systems, and CSMs are disabled by default on any system sold with secure boot enabled (ie, everything sold with Windows pre-installed)

No, you'll still have the TPM's dictionary attack lockout.

Yup, if there's no passphrase involved.

It being UEFI doesn't mean it's a standard platform, there's no ACPI and you're going to need a custom kernel that targets that specific device. UEFI alone isn't enough to support booting a generic OS.

And thanks! Updated my profile.

UEFI is pretty common on phones now, but it's unlikely that any of them are running this network stack there.

Yeah I'm actually not terribly worried about the server scenario, but having a way to get code exec in the firmware lets you defeat measured boot, which means this is a Bitlocker bypass in the default config.

> doesn't really provide a hardware abstraction layer like BIOS does

I'm not really sure what this means. UEFI provides a consistent interface to access storage devices, network devices, input devices, and access to a framebuffer. How else would bootloaders work?

Wrapping/unwrapping means the HSM would generate the private key and then encrypt it with a key only known to the other HSMs. Those other HSMs would then decrypt the key on import. The private key should still have been impossible to examine outside the HSMs.

Yes. The degree to which this presents a different experience is one I would not have found credible beforehand.

Saw it on Friday in Berkeley, and: yes, there was absolutely audience participation, and there were moments where I had to restrain myself from joining in.

They're incredibly different things telling different stories. One doesn't replace the other.

In the US market, at least, the quality has improved dramatically over the past few years. Several established breweries now produce alcohol-removed versions of existing beers, with varying degrees of success - but in general my experience is that alcohol-free dark beers work better, the increased maltiness does a better job of hiding what's missing. IPAs and lagers can end up tasting somewhat thin compared to the normal version.

There's a few things I miss about the UK, and one of them is easy availability of beer that's less than 5%. Unfortunately that seems to have been creeping upwards - the shift to craft keg (rather than cask) beer seems to have been accompanied by moving more in the direction of US-style stronger beers. Several breweries do still produce milds that are in the <3% range, but it's increasingly hard to find them, even in pubs that used to be reliable suppliers. It's interesting how cultural this is.

Does "how it goes" include the guest being able to DMA over the host kernel?