Am 26.09.2011 21:56, schrieb Michael Mol: >> Is it more complicated than that?
> Just a hunch, but I think the BIOS will probably be signed. Perhaps in > replacement of the existing checksum functionality. I have something like that on my Motorola Milestone Android Phone. It is not possible to change the kernel because the bootloader is signed and only loads signed kernels. The "BIOS" of the phone is signed so that you can't change the bootloader. Milestone is out for about 2 years now, many smart people tried to hack it but till now no luck and it does not look like it will be hacked ever. I fear that something like that will come to most laptops and many ready built desktop computers in a few years. It will likely still be possible to buy mainboards without it, for a high prize I also fear. Greetings Sebastian Beßler