Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #236994

Re: Help: explanation of secure flash?

Path csiph.com!newsfeed.xs4all.nl!newsfeed9.news.xs4all.nl!bofh.it!news.nic.it!robomod
From "Jeremy Nicoll" <jn.ml.dbn.25@letterboxes.org>
Newsgroups linux.debian.user
Subject Re: Help: explanation of secure flash?
Date Wed, 07 Jul 2021 01:10:01 +0200
Message-ID <Cy2mt-2aJ-1@gated-at.bofh.it> (permalink)
References <Cy1Tr-1LQ-1@gated-at.bofh.it>
X-Mailbox-Line From debian-user-request@lists.debian.org Tue Jul 6 23:08:10 2021
Old-Return-Path <jn.ml.dbn.25@letterboxes.org>
X-Amavis-Spam-Status No, score=-7.547 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no
X-Policyd-Weight NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .letterboxes. - helo: .out2-smtp.messagingengine. - helo-domain: .messagingengine.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5
X-Me-Sender <xms:RuLkYLuj-g1uvGd6v8nklEZrGuhbt-aC_AJ2gsfNT1UVWkjqRsEvNpxt> <xme:RuLkYMfUK4X4S6lxjnxGV8ie3ZfL5nFwg4dBw5MFVu0EA4dphtDJIr_9l0IXwm2TF tPe0ykXjJH5Z6tP>
X-Me-Proxy-Cause gggruggvucftvghtrhhoucdtuddrgedvtddrtddugdduudcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefofgggkfgjfhffhffvufgtsehttdertderredtnecuhfhrohhmpedflfgvrhgv mhihucfpihgtohhllhdfuceojhhnrdhmlhdruggsnhdrvdehsehlvghtthgvrhgsohigvg hsrdhorhhgqeenucggtffrrghtthgvrhhnpeeljeeigfffieejuedthedtueefheeileeg teeluddvgeejteektedvkeejheevheenucevlhhushhtvghrufhiiigvpedunecurfgrrh grmhepmhgrihhlfhhrohhmpehjnhdrmhhlrdgusghnrddvheeslhgvthhtvghrsghogigv shdrohhrgh
X-Me-Proxy <xmx:RuLkYOy6qMWKPLeKK8DZhy7DJn82ETN5Ax4ACTzPTuJJFK8SMHnpPg> <xmx:RuLkYKMKO_982jbkkjTwWRz4wlYxhOXL-Okl0gBRHekablXiY9zTcg> <xmx:RuLkYL-9ORzCX48Bn2XlQ0q3Qy9R30O1v0AnTH4fF6MZoS2CW1Az5Q> <xmx:RuLkYOKqV9S04yrSvS7v0mKM1IZ9hEMM31q70hBYAHjo8z9Wlij86Q>
X-Mailer MessagingEngine.com Webmail Interface
User-Agent Cyrus-JMAP/3.5.0-alpha0-531-g1160beca77-fm-20210705.001-g1160beca
MIME-Version 1.0
Content-Type text/plain
X-Mailing-List <debian-user@lists.debian.org> archive/latest/777612
List-ID <debian-user.lists.debian.org>
List-URL <https://lists.debian.org/debian-user/>
List-Archive https://lists.debian.org/msgid-search/d9605baa-a5f8-4440-aa4b-84033845a6b2@www.fastmail.com
Approved robomod@news.nic.it
Lines 29
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Wed, 07 Jul 2021 00:07:29 +0100
X-Original-Message-ID <d9605baa-a5f8-4440-aa4b-84033845a6b2@www.fastmail.com>
X-Original-References <202107061837.47413.rhkramer@gmail.com>
Xref csiph.com linux.debian.user:236994

Show key headers only | View raw


On Tue, 6 Jul 2021, at 23:37, rhkramer@gmail.com wrote:
> I've seen warnings (against hacks) that say (among other things) to enable 
> "secure flash".  I've been googling to learn more about that, but I haven't 
> found any good explanation.
> 
> I'm beginning to get hints that it is not so much a thing (to be enabled), but 
> more the (a) process to update the computer's BIOS.  (e.g., "'Unable to start 
> a Secure flash session' error message.")

It might be a suggestion that you use your BIOS or UEFI to disable the 
machine's ability to boot off a USB stick ... because that - if it's on - allows
anyone to reboot your machine with the OS and tools of their choice.

So, you go into the BIOS, find the right option(s) and disable them, then
make sure you have passwords set to control access to the BIOS if you 
didn't already have them set, then save & exit.

If YOU ever need to boot from a USB stck you enter the BIOS again, 
supplying its password, and turn the option back on.  Don't forget 
after that to disable it again.

As to what the options(s) are actually called in your machine's BIOS, 
who knows?  In my experience BIOS options normally have very 
terse names and the "help" text is only marginally more useful.  But
you should be able to google on the option name and the BIOS
supplier's name and the BIOS version to find out more.

-- 
Jeremy Nicoll - my opinions are my own.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Help: explanation of secure flash? rhkramer@gmail.com - 2021-07-07 00:40 +0200
  Re: Help: explanation of secure flash? "Jeremy Nicoll" <jn.ml.dbn.25@letterboxes.org> - 2021-07-07 01:10 +0200
    Re: Help: explanation of secure flash? rhkramer@gmail.com - 2021-07-07 22:10 +0200
      Re: Help: explanation of secure flash? Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-08 03:00 +0200
        Re: Help: explanation of secure flash? rhkramer@gmail.com - 2021-07-08 04:20 +0200
  Re: Help: explanation of secure flash? "Rick Thomas" <rick.thomas@pobox.com> - 2021-07-07 03:10 +0200
  Re: Help: explanation of secure flash? "Rick Thomas" <rick.thomas@pobox.com> - 2021-07-07 03:10 +0200
  Re: Help: explanation of secure flash? "Kevin N." <kevin@notscheduled.eu> - 2021-07-07 05:10 +0200
    Re: Help: explanation of secure flash? rhkramer@gmail.com - 2021-07-07 14:50 +0200
      Re: Help: explanation of secure flash? Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-07 16:10 +0200

csiph-web