Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > aus.computers > #71494

Re: Why secure boot might be a good idea on your Linux machine

Show all headers | View raw

On 13/12/2024 7:19 am, Computer Nerd Kev wrote:
> Keithr0 <nothing.to.see@here.com.au> wrote:
>> On 11/12/2024 7:28 am, Computer Nerd Kev wrote:
>>> Mighty Mouse <"squeak!"@thecheesefactory.com> wrote:
>>>> Computer Nerd Kev wrote:
>>>>> Mighty Mouse <"squeak!"@thecheesefactory.com> wrote:
>>>>>> Computer Nerd Kev wrote:
>>>>>>> Since you're pretty stuffed once a hacker has root access anyway,
>>>>>>> Secure Boot never seemed worth the added complexity to me, but
>>>>>>> that's a matter of opinion.
>>>>>> what happens if they get root access?
>>>>> They can read any file and install/change whatever software they
>>>>> like, same as you can yourself. A non-root user on a Linux system
>>>>> is more limited, although exactly how limited depends on the
>>>>> permissions granted to that user (for a user running high-risk
>>>>> things like Web server processes, usually very few).
>>>>
>>>> thanks, that explains it. I assume reinstalling Linux fixes the problem
>>>
>>> Usually, unless it's something new which installs to the UEFI
>>> firmware like some viruses have done on Windows.
>>>
>> See the first message in this thread, it has already been done.
> 
> As it happens that article has been revised now to point out that
> this hasn't already been done, at least not by that particular
> Linux bootkit.
> 
>> There is nothing special about Linux that would prevent the same
>> thing being done.
> 
> Yep, once the attacker has found a way to get root access there.
> I wasn't implying otherwise.
> 
Open source seems to be getting more and more vulnerable to supply chain 
exploits. Miscreants have realised that they can become maintainers and 
slip exploits into items that are dependencies for other applications. 
At least one instance has been detected, who knows how many more are out 
there.

Back to aus.computers | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-11-28 21:55 +1000
  Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-11-29 07:27 +1000
    Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-11-29 10:54 +1000
      Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-11-30 17:53 +1000
        Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-01 06:43 +1000
          Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-12-02 21:31 +1000
          Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-09 19:31 +1100
            Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-12-09 19:33 +1000
              Re: Why secure boot might be a good idea on your Linux machine Daniel70 <daniel47@nomail.afraid.org> - 2024-12-10 00:22 +1100
                Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-12-10 20:36 +1000
                Re: Why secure boot might be a good idea on your Linux machine Daniel70 <daniel47@nomail.afraid.org> - 2024-12-10 22:05 +1100
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-11 00:38 +1100
                Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-11 07:20 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-18 09:43 +1100
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-18 09:59 +1100
                Re: Why secure boot might be a good idea on your Linux machine Computer Nerd Kev <not@telling.you.invalid> - 2024-12-18 11:32 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-19 13:18 +1100
                Re: Why secure boot might be a good idea on your Linux machine Computer Nerd Kev <not@telling.you.invalid> - 2024-12-19 13:34 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-19 17:57 +1100
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-19 18:22 +1100
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-19 20:34 +1100
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-20 12:26 +1100
                Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-21 07:34 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-21 12:30 +1100
                Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-21 14:36 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-21 18:18 +1100
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-21 22:32 +1100
                Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-22 07:55 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-23 11:14 +1100
                Re: Why secure boot might be a good idea on your Linux machine Computer Nerd Kev <not@telling.you.invalid> - 2024-12-23 16:48 +1000
                Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-23 12:12 +1100
                Re: Why secure boot might be a good idea on your Linux machine Computer Nerd Kev <not@telling.you.invalid> - 2024-12-23 16:52 +1000
                Re: Why secure boot might be a good idea on your Linux machine ng <ng@ng.com> - 2024-12-29 14:33 +0000
                Re: Why secure boot might be a good idea on your Linux machine ng <ng@ng.com> - 2025-01-03 03:43 +0000
                Re: Why secure boot might be a good idea on your Linux machine MightyMouse <"squeak!"@thecheesefactory.com> - 2025-01-05 18:43 +1100
                Re: Why secure boot might be a good idea on your Linux machine MightyMouse <"squeak!"@thecheesefactory.com> - 2025-01-05 18:43 +1100
            Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-10 08:05 +1000
              Re: Why secure boot might be a good idea on your Linux machine Mighty Mouse <"squeak!"@thecheesefactory.com> - 2024-12-10 10:23 +1100
                Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-11 07:28 +1000
                Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-12-12 21:41 +1000
                Re: Why secure boot might be a good idea on your Linux machine noel <deletethis@invalid.lan> - 2024-12-13 07:08 +1000
                Re: Why secure boot might be a good idea on your Linux machine not@telling.you.invalid (Computer Nerd Kev) - 2024-12-13 07:19 +1000
                Re: Why secure boot might be a good idea on your Linux machine Keithr0 <nothing.to.see@here.com.au> - 2024-12-16 16:39 +1000

csiph-web