@coolboymew@muio It avoids to boot non allowed software, it's great for some malware but the issue is that manufacturers are cunts and don't want to allow anything but MS to boot. It's really bad because outside of GNU/linux I have diagnostic software that also need to boot, when UEFI first got on the market I couldn't even load memtest86+. This crap is cancer and removes the ability to install/boot what you want for people, meaning that it also kills commerce. And historically there was a proposition to have a hardware jumper to be able to write new keys if needed but for some very read reason it was rejected.