shim VS tor-relay-docker

Microsoft doesn't really sign other people's code for UEFI. They do sign shim (https://github.com/rhboot/shim) which will look at other keys the user registered with UEFI to load other components to enable you to write custom third party UEFI modules while still supporting secure boot.

In this case, the distros first boot loader is shim, which is signed by Microsoft. Shim is FOSS: https://github.com/rhboot/shim

How do I get dual boot set up and running? There doesn't seem so much documentation about this sbat chicanery as it was introduced to shim in 2021 and patched in rEFInd a bit more than a month ago, so I suppose not enough people have had this trouble yet.

Secure boot still isn't "secure" at all because microsoft has signed multiple bootloaders with their own keys, which exist only to chain load a second bootloader. See https://github.com/rhboot/shim and https://blog.hansenpartnership.com/linux-foundation-secure-boot-system-released/

A new mechanism called SBAT (https://github.com/rhboot/shim/blob/main/SBAT.md) is now used to allow revocation of groups of bootloaders rather than individual hashes in order to mitigate the resource consumption

{ echo "sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md" echo "systemd-boot,1,systemd,systemd-boot,1,https://systemd.io" } > sbat.csv

Yeah, that incident instigated a totally new approach to revoking bad bootloaders that everybody (including Microsoft) should be using nowadays. So I guess HP just never got the memo.

See Configuration and syntax changes and Special packages. The latter this time includes changes around NextCloud 23 and Tor Browser prior to 12.5, both of which should be upgraded beforehand.

That stuff is exactly what the Tor Browser is for: <https://www.torproject.org/download/>. No need for any of that other stuff.

Then you're using it wrong. GPG isn't adding anything to this that SHA256 wouldn't, and you're just relying on the SSL certificate.

Look at your list of CAs sometime. There's multiple national organizations there. Controlled by a government.

And any of those will be deemed as valid, so if you go to https://www.torproject.org/download/ and it's signed by a Chinese CA for some reason, to your browser that's perfectly fine.

> What are the chances the official site AND the archive were both compromised?

You're talking about a piece of software that's designed to hide stuff from state level actors. If you're in actual need of such a thing, that threat is pretty damn serious.

Download the Tor app here

First if you know nothing about the darkweb and darknet markets, the first step is getting the tor browser here- www.torproject.org/download/

You need Git, Docker, and a browser that's able to handle .onion addresses (e.g., Tor Browser or Brave).

Install Tor Browser.

Anonymous has released the following press release, encouraging whistleblowers to leak information about UAPs, UFOs and NHIs. YouTube Video: https://youtu.be/DqDOz5UJ83A Disclosure leak website: https://disclosure.youranon.news Tor Browser: https://www.torproject.org/download/ Tails OS: https://tails.net/install/download/ Onion Links may be updated as necessary on the Disclosure Website. We may install multiple links depending on traffic. We ask that only serious people who have information send files! Thank you! _______________________________________________________________

Tor browser: https://www.torproject.org/download/