BIOS boot vs UEFI boot

[bgavin]

Baloney.
The purpose is to boot the machine.
If it boots I’m good.
That is all I want it to do.
Simple, clean and easy to fix.
I don’t give a damn about security or the endless nannies that try (and fail) at trying to intercept every security exposure the smart bad guys devise. The more complicated the mouse trap the more ingenious ways the rats find to get around it. There is no unique machine ID stored in BIOS that gets uploaded to ?? for nefarious purposes.

 

[Espionage724]

I don’t give a damn about security or the endless nannies that try (and fail) at trying to intercept every security exposure the smart bad guys devise. The more complicated the mouse trap the more ingenious ways the rats find to get around it.

Security's a myth (fine when it works, no guarantees, but always slowing stuff down while not offering rolling-protection guarantees; protections with easy-toggles get disabled for convenience, and all it takes is a lapse of judgement during that convenience for security to fail/Vista's UAC prompt on minor tasks and getting used to Allowing everything)

I disable ASLR, CFG, DEP, run Windows with EnableLua=0 since it first came with Vista, and run openSUSE without AppArmor or SELinux by choice + mitigations=off; no problems for years and max-speed/performance everywhere (my defense is not messing with stuff like Spiderman-3-imax.mov.exe, or uploading unfamiliar stuff through VirusTotal)

SecureBoot and FDE afaik can't guarentee protection if there's physical access (YellowKey, golden key certs, weak CPU RNG, keylog/dongle, camera above keyboard, wrench); so why try and have more complexity Worst-case my pass DB is encrypted, but everything else can serve as an example to the next person on what a good set-up looks like.

What would you choose for a system on which only FreeBSD is installed?

UEFI; technically I think it's easier to update the bootloader (haven't tried that non-EFI), but realistically I like faster boots with minimal effort (haven't seen any issue on UEFI computers with FreeBSD that implied BIOS/Legacy would differ)