Activision is beginning to add support for the features in a “phased rollout.”
  • Pika@sh.itjust.worksEnglish
    44·
    11 months ago

    I mean I haven’t played one of their games in a few generations now, but like, this defo isn’t helping the chances

    • Cethin@lemmy.zipEnglish
      24·
      11 months ago

      Their AC doesn’t work on Linux, so my odds of plying it went to 0 when I found that out. Fuck them anyway. They haven’t made a game worth playing in probably decades. There are better cheaper games not ran by greedy corpos.

      • warm@kbin.earth
        4·
        11 months ago

        Game is just watered down af anyway to appeal to the call of duty crowd as much as possible. BF lost its identity, so you aren’t missing anything.

  • Romkslrqusz@lemmy.zipEnglish
    6·
    11 months ago

    I mean, this is fine. Secure Boot is on everything motherboard from the last 12 years, there are very few reasons not to have it enabled and those reasons are usually edge case scenarios.

    Would absolutely take this over a kernel level driver.

      • misk@piefed.socialOPEnglish
        6·
        11 months ago

        Secure boot requires OS kernel to be digitally signed so that’s just another way to prevent tampering. It’s not like those or any other games will be doing anything other than checking if it’s on because there’s not that much else it can be used for. Secure boot is annoying as hell if you use anything other than Windows though.

        • sugar_in_your_tea@sh.itjust.worksEnglish
          6·
          11 months ago

          You can load your own keys and sign whatever you want. It’s not going to prevent anyone but the most unsophisticated of cheaters. What it does is prevent malicious code from being injected early in the boot, it doesn’t prevent users from loading whatever code they want early in boot.

          • misk@piefed.socialOPEnglish
            1·
            11 months ago

            Can you really sign your own modified Windows kernel or drivers? I don’t think that’s how cryptography works.

            • sugar_in_your_tea@sh.itjust.worksEnglish
              2·
              11 months ago

              I’m not sure about Windows specifically, I just know you can load your own keys onto the mobo. In general, a cryptographic signature is just metadata tacked onto a file, so presumably yes, you could sign the kernel yourself and load your key so Secure Boot works.

              The way Linux distros generally work (e.g. Debian) is to use a shim binary and chain load into their own kernel binary. An exerpt:

              Starting with Debian version 10 (“Buster”), Debian supports UEFI Secure Boot by employing a small UEFI loader called shim which is signed by Microsoft and embeds Debian’s signing keys. This allows Debian to sign its own binaries without requiring further signatures from Microsoft.

              So even if signing the Windows kernel doesn’t work (I don’t see why it wouldn’t), you could use a loader shim like Debian does to not require loading your own keys.

              To be fair, I haven’t read the details of Secure Boot specifically to know how it’s done, I’m just going based on my understanding of PGP (about how signing works), early kernel boot, and high level details about Secure Boot. I’m sure someone sophisticated enough to design kernel-level game cheats could figure out how to make Secure Boot happy without a ton of effort from users.

              Secure Boot isn’t designed to prevent users from doing things, it merely prevents malicious code from being loaded at boot (i.e. code that doesn’t have access to the keys loaded onto the Secure Boot module).

              • misk@piefed.socialOPEnglish
                1·
                11 months ago

                I’m not sure about Windows specifically

                That’s quite an important omission because we’re talking about Windows. Windows won’t run kernel or driver that’s not using expected certificates, what would be the point otherwise?

                • sugar_in_your_tea@sh.itjust.worksEnglish
                  1·
                  11 months ago

                  Again, I don’t know the specifics about Windows, so I can’t say exactly what a cheater could or could not do. I do know that kernel chaining does work w/ Windows, otherwise the GRUB bootloader would be DOA.

                  Whatever Windows does is a completely separate thing from Secure Boot, since Secure Boot only impacts early boot (i.e. the handoff from UEFI to the kernel). So getting into what Windows does and does not allow isn’t particularly relevant to the discussion about Secure Boot.

                • sugar_in_your_tea@sh.itjust.worksEnglish
                  1·
                  11 months ago

                  Unbootable w/o changes, yes, assuming hardware vendors actually respect the expiration date.

                  But that’s completely separate from my point. Regardless of the solution they pick for that particular problem, users can still add their own keys to Secure Boot and do whatever they want.