Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #161939

Re: grub2 security problem

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Dec 20, 2015 at 04:08:30PM +0100, Anders Andersson wrote:
> On Sun, Dec 20, 2015 at 5:00 AM, David Christensen
> <dpchrist@holgerdanske.com> wrote:
> >
> > Another, additional, option is self-encrypting drives (SED), which are
> > operating system agnostic and protect the entire contents of drive with zero
> > CPU overhead.
> 
> Emphasis on the word "additional" here. Unless you have access to the
> source code and hardware that actually implements the drive
> encryption, I would trust it about as far as I can throw the drive,

I'd like to see that ;-)

But seriously: given the history of firmware botches around (yes,
including encrypted harddisks), and given the keen interest of shady
state agencies [1] [2] (and that they prefer to work in the dark,
like vampires and cockroaches), I strongly agree with your throwing
sentiment.

[1] http://www.wired.com/2015/02/nsa-firmware-hacking/
[2] http://www.theregister.co.uk/2015/02/17/kaspersky_labs_equation_group/

- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlZ2wFgACgkQBcgs9XrR2kZuCgCaAhGtWayXpk8COvFi4pTxAjwO
SDYAnRkGK7/LUJVxRbFXup8LgKszu6W9
=1LS1
-----END PGP SIGNATURE-----

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

grub2 security problem Michael Fothergill <michael.fothergill@googlemail.com> - 2015-12-19 10:40 +0100
  Re: grub2 security problem Joe <joe@jretrading.com> - 2015-12-19 10:50 +0100
  Re: grub2 security problem Teemu Likonen <tlikonen@iki.fi> - 2015-12-19 10:50 +0100
  Re: grub2 security problem Brad Rogers <brad@fineby.me.uk> - 2015-12-19 13:10 +0100
    Re: grub2 security problem Michael Fothergill <michael.fothergill@googlemail.com> - 2015-12-19 13:20 +0100
  Re: grub2 security problem Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2015-12-19 18:20 +0100
    Re: grub2 security problem David Christensen <dpchrist@holgerdanske.com> - 2015-12-20 05:10 +0100
      Re: grub2 security problem Anders Andersson <pipatron@gmail.com> - 2015-12-20 16:10 +0100
        Re: grub2 security problem <tomas@tuxteam.de> - 2015-12-20 16:30 +0100
          Re: grub2 security problem Gene Heskett <gheskett@shentel.net> - 2015-12-20 16:50 +0100
      Re: grub2 security problem Pascal Hambourg <pascal@plouf.fr.eu.org> - 2015-12-20 17:10 +0100

csiph-web