Context: this is a legit screenshot I took on my workplace around 1.5 years ago. Hopefully it’s been patched by now? Completely ridiculous behavior
deleted by creator
I guess MacBooks are easier to deploy
deleted by creator
I was talking specifically about MacOS X vs. everything else because, for example, you don’t have to setup the bios. Just hand out a macbook for everyone and (mostly) deployment compñete, i guess
Unix based systems tend to be able to be hardened to a higher level than windows devices. Apple provides a lot of apis for preventing unsigned code from running, which can go a long way beyond a locked down bootloader.
It’s less that they’re intrinsically more secure, it’s just that it’s a bit easier for a determined admin to lock it way further down while also not irritating the user.
I seem to recall Chromebooks are even better, but you sacrifice a lot more.