Yeah , this is in general very good advice in other facets of life too . Motivation is a fleeting sensation , discipline is really the key . <| sep |> rnfl really became rcowboys 2 really quickly didn ' t it <| sep |> Had to google to get the reference . What a fucked up human being . <| sep |> You know the old owners look like their pets myth ? Well , take a look at Shillary and her owner contentuploads 201502 GeorgeSoros 1940 x 1294 . jpeg . It ' s not a myth . <| sep |> Which thing is the metaphorical glass <| sep |> Unless I ' m mistaken , Secure Boot was supposed to protect against this sort of attackDon ' t think of UEFI secure boot and TPM with an exclusive or . In fact they complement each other rather nicely . Usually you ' ll see TPM used as the hardened storage for secure boot ' s root of trust , TPM itself has some protections in place to make it difficult for someone with physical access to the machine to manipulate data stored within TPM . but since it ' s almost never possible to add custom keysI don ' t buy a ton of hardware but all the UEFI laptops and workstation motherboards I ' ve bought allow me to manage the key store . Naturally the first order of business is blacklisting the Microsoft keys and installing my own key . I do custom kernels on a number of my systems as well as building GRUB myself on my desktop and my file server so I ' ve automated the build , initramfs generation , and signing process . I keep the private keys off line on an encrypted file system in a combination safe when not in use .