Re: uefi malware--threat to all?

From	Bobbie Sellers <bliss@mouse-potato.com>
Newsgroups	comp.os.linux.misc
Subject	Re: uefi malware--threat to all?
Date	2023-03-07 21:38 -0800
Organization	dis-organization
Message-ID	<tu970m$plh7$2@dont-email.me> (permalink)
References	<tu5afp$qf3$1@dont-email.me> <tu7k7o$2nbn$1@paganini.bofh.team> <tu87ob$hunh$1@dont-email.me>

Show all headers | View raw

On 3/7/23 12:44, pH wrote:
> On 2023-03-07, Andrei Z. <no-email@invalid.invalid> wrote:
>> pH wrote:
>>> I just saw this article in google news today.
>>>
>>> https://arstechnica.com/information-technology/2023/03/unkillable-uefi-malware-bypassing-secure-boot-enabled-by-unpatchable-windows-flaw/
>>>
>>> I'm not up on my acronyms, but I've seen uefi mentioned here at times.
>>>
>>> I'm assuming since this runs first, Linux is therefore not immune to this
>>> malware.
>>>
>>> Would a workaround be enabling legacy boot and running an older distro
>>> until...well, I'll wait for any comments from you smarter guys out there.
>>>
>>> pH in Aptos
>>
>> TCG TPM2.0 implementations vulnerable to memory corruption
>>
>> Vulnerability Note VU#782720
>> Original Release Date: 2023-02-28 | Last Revised: 2023-03-06
>>
>> https://kb.cert.org/vuls/id/782720
>>
>> Trusted Platform Module - Wikipedia
>> https://en.wikipedia.org/wiki/Trusted_Platform_Module
>>
> 
> So, what two or three steps might one want to do before installing, say,
> Mint 20.3 or anything recent...
> 
> In my case, I just got into the bios and had it boot from DVD/CD first.
> I remember turning something "off" on that same page, but don't recall what
> it was now.  This was a cheap Lenovo (IBM) laptop.  Works fine so far.
> 
> o turn off "secure boot"
> anything else?
> 
> pH

	If you have Windows on the machine make sure Fast Boot is turned off 
and that Windows completely shuts down when you leave it.  No 
Hibernation or Suspend for Windows.
	If it is not shut down it may retain hooks that will make it difficult 
for Linux.

	bliss- still old and tired.
-- 
bliss dash SF 4 ever at dslextreme dot com

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

uefi malware--threat to all? pH <wNOSPAMp@gmail.org> - 2023-03-06 18:13 +0000
  Re: uefi malware--threat to all? Richard Kettlewell <invalid@invalid.invalid> - 2023-03-06 19:14 +0000
  Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-06 21:07 +0100
    Re: uefi malware--threat to all? pH <wNOSPAMp@gmail.org> - 2023-03-07 00:36 +0000
      Re: uefi malware--threat to all? "28B.I874" <28B.I874@noabzba.net> - 2023-03-06 20:10 -0500
      Re: uefi malware--threat to all? Bobbie Sellers <bliss@mouse-potato.com> - 2023-03-06 17:11 -0800
        Re: uefi malware--threat to all? "28B.I874" <28B.I874@noabzba.net> - 2023-03-07 00:46 -0500
        Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-07 08:42 +0100
          Re: uefi malware--threat to all? Bobbie Sellers <bliss@mouse-potato.com> - 2023-03-07 08:01 -0800
            Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-07 16:49 +0000
            Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-07 19:08 +0100
              Re: uefi malware--threat to all? Bobbie Sellers <bliss@mouse-potato.com> - 2023-03-07 21:33 -0800
                Re: uefi malware--threat to all? "28B.A864" <28B.A864@noqbgba.net> - 2023-03-16 01:24 -0400
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-16 09:59 +0000
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-16 15:18 -0400
                Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-16 21:05 +0100
                Re: uefi malware--threat to all? Robert Heller <heller@deepsoft.com> - 2023-03-16 21:06 +0000
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-16 22:43 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-17 11:20 +0100
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-17 11:56 +0000
                Re: uefi malware--threat to all? Dan Espen <dan1espen@gmail.com> - 2023-03-17 15:00 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-17 22:57 +0100
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-17 22:03 -0400
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-18 09:55 +0000
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-17 21:55 -0400
                Re: uefi malware--threat to all? Robert Riches <spamtrap42@jacob21819.net> - 2023-03-19 04:13 +0000
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-19 02:38 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-19 11:40 +0100
                Re: uefi malware--threat to all? Bobbie Sellers <bliss@mouse-potato.com> - 2023-03-19 13:12 -0700
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-20 01:05 -0400
                Re: uefi malware--threat to all? Robert Riches <spamtrap42@jacob21819.net> - 2023-03-21 03:09 +0000
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-20 20:27 +0000
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-20 21:48 -0400
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-17 11:47 +0000
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-17 12:36 -0400
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-17 11:46 +0000
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-17 12:44 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-16 22:14 +0100
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-17 13:09 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-17 23:35 +0100
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-17 11:39 +0000
                Re: uefi malware--threat to all? Roger Blake <rogblake@iname.invalid> - 2023-03-21 02:03 +0000
                Re: uefi malware--threat to all? "29V.X746" <29V.X746@noqb1u.net> - 2023-03-21 01:13 -0400
                Re: uefi malware--threat to all? Richard Kettlewell <invalid@invalid.invalid> - 2023-03-21 09:00 +0000
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-21 11:52 +0100
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-21 11:52 +0100
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-21 10:30 -0400
                Re: uefi malware--threat to all? Robert Heller <heller@deepsoft.com> - 2023-03-21 15:43 +0000
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-21 12:29 -0400
                Re: uefi malware--threat to all? Robert Heller <heller@deepsoft.com> - 2023-03-21 17:46 +0000
                Re: uefi malware--threat to all? Fritz Wuehler <fritz@spamexpire-202303.rodent.frell.theremailer.net> - 2023-03-23 23:44 +0100
                Re: uefi malware--threat to all? jeshgrca <jeshgrca@gmail.com> - 2023-03-23 21:56 -0500
                Re: uefi malware--threat to all? Fritz Wuehler <fritz@spamexpire-202303.rodent.frell.theremailer.net> - 2023-03-25 01:58 +0100
                Re: uefi malware--threat to all? "27E.G756" <27E.G756@noq24u.net> - 2023-03-26 20:26 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-27 02:37 +0200
                Re: uefi malware--threat to all? "27E.G756" <27E.G756@noq24u.net> - 2023-03-26 23:11 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-27 11:45 +0200
                Re: uefi malware--threat to all? "27E.G756" <27E.G756@noq24u.net> - 2023-03-28 01:09 -0400
                Re: uefi malware--threat to all? Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2023-03-28 01:26 +0000
                Re: uefi malware--threat to all? "27E.G756" <27E.G756@noq24u.net> - 2023-03-28 01:16 -0400
                Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-21 08:28 +0100
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-21 10:22 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-21 15:54 +0100
                Re: uefi malware--threat to all? Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2023-03-21 18:25 +0000
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-21 21:20 +0100
                Re: uefi malware--threat to all? "27E.G756" <27E.G756@noq24u.net> - 2023-03-26 23:25 -0400
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-27 11:47 +0200
                Re: uefi malware--threat to all? "27E.G756" <27E.G756@noq24u.net> - 2023-03-28 23:01 -0400
                Re: uefi malware--threat to all? Computer Nerd Kev <not@telling.you.invalid> - 2023-03-29 16:43 +1000
                Re: uefi malware--threat to all? "22T.R732" <22TR732@noq24u.net> - 2023-03-30 21:41 -0400
                Re: uefi malware--threat to all? TJ <TJ@noneofyour.business> - 2023-03-21 10:46 -0400
        Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-07 09:07 +0100
          Re: uefi malware--threat to all? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-03-07 13:00 -0500
            Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-07 19:09 +0100
              Re: uefi malware--threat to all? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-03-07 14:56 -0500
          Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-07 19:09 +0100
            Re: uefi malware--threat to all? "28B.I874" <28B.I874@noabzba.net> - 2023-03-07 21:39 -0500
              Re: uefi malware--threat to all? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-03-07 22:35 -0500
                Re: uefi malware--threat to all? "28B.I874" <28B.I874@noabzba.net> - 2023-03-08 01:29 -0500
                Re: uefi malware--threat to all? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-03-08 01:48 -0500
                Re: uefi malware--threat to all? "28C.I874" <28C.I874@noabgba.net> - 2023-03-08 20:35 -0500
              Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-08 07:57 +0000
                Re: uefi malware--threat to all? Richard Kettlewell <invalid@invalid.invalid> - 2023-03-08 08:59 +0000
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-08 10:15 +0000
                Re: uefi malware--threat to all? Richard Kettlewell <invalid@invalid.invalid> - 2023-03-08 15:14 +0000
                Re: uefi malware--threat to all? Robert Heller <heller@deepsoft.com> - 2023-03-08 16:06 +0000
                Re: uefi malware--threat to all? Rich <rich@example.invalid> - 2023-03-08 16:59 +0000
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-08 17:55 +0000
                Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-08 17:59 +0000
                Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-08 20:33 +0100
                Re: uefi malware--threat to all? Robert Heller <heller@deepsoft.com> - 2023-03-08 22:35 +0000
              Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-21 08:49 +0100
      Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-07 08:40 +0100
  Re: uefi malware--threat to all? "Andrei Z." <no-email@invalid.invalid> - 2023-03-07 18:11 +0300
    Re: uefi malware--threat to all? pH <wNOSPAMp@gmail.org> - 2023-03-07 20:44 +0000
      Re: uefi malware--threat to all? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-03-07 16:32 -0500
        Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-21 08:27 +0100
      Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-07 21:38 +0000
      Re: uefi malware--threat to all? Bobbie Sellers <bliss@mouse-potato.com> - 2023-03-07 21:38 -0800
        Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-08 12:00 +0100
          Re: uefi malware--threat to all? The Natural Philosopher <tnp@invalid.invalid> - 2023-03-08 11:06 +0000
          Re: uefi malware--threat to all? Marco Moock <mo01@posteo.de> - 2023-03-08 12:50 +0100
            Re: uefi malware--threat to all? "Carlos E.R." <robin_listas@es.invalid> - 2023-03-08 13:20 +0100

csiph-web