icedterminal

> Booting a self-signed HackBGRT from grub with the key enrolled does not seem to be working. The certificate is enrolled with Grub? It should work without issue. If not,...

What's the model?

Surface devices have Microsoft's unique UEFI. Since you said this is a customer facing device you'll want to enroll it in the Enterprise Management Mode. https://docs.microsoft.com/en-us/surface/surface-enterprise-management-mode You can secure it...

> the only location it will let me select is somewhere inside the EFI partition. The firmware may not have the capability to read NTFS directly (requires licensing). FAT32 is...

> but actually accessing it I get prompts that I need to get permissions, and trying to adding myself or everyone permissions always fails with access is denied. Maybe windows...

> But this restriction is for explorer only. Perhaps you missed where I specifically pointed that out in my response.

Could a link to this issue be added in the warning? For user experience purposes. Right now it's just a red text message with vague information. A link to this...

> I'm mostly worried about side effects from including `books-analytics-events.apple.com`. This domain only pings if the user has Books installed *and* uses it on Mac, iPhone or iPad. From what...

@StevenBlack The label you assigned this is making me giggle. Interesting find here. There are four related domains that are logged when testing Google apps. ``` encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com...

This is in fact a harmless domain. After poking around, it's a CDN for optimised images. Basically a cache. Requests are pretty basic. Used in a wide array of Google...