Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #161940

Re: grub2 security problem

Show all headers | View raw

On Sunday 20 December 2015 09:51:04 tomas@tuxteam.de wrote:

> On Sun, Dec 20, 2015 at 04:08:30PM +0100, Anders Andersson wrote:
> > On Sun, Dec 20, 2015 at 5:00 AM, David Christensen
> >
> > <dpchrist@holgerdanske.com> wrote:
> > > Another, additional, option is self-encrypting drives (SED), which
> > > are operating system agnostic and protect the entire contents of
> > > drive with zero CPU overhead.
> >
> > Emphasis on the word "additional" here. Unless you have access to
> > the source code and hardware that actually implements the drive
> > encryption, I would trust it about as far as I can throw the drive,
>
> I'd like to see that ;-)
>
> But seriously: given the history of firmware botches around (yes,
> including encrypted harddisks), and given the keen interest of shady
> state agencies [1] [2] (and that they prefer to work in the dark,
> like vampires and cockroaches), I strongly agree with your throwing
> sentiment.
>
> [1] http://www.wired.com/2015/02/nsa-firmware-hacking/
> [2]
> http://www.theregister.co.uk/2015/02/17/kaspersky_labs_equation_group/
>
> -- t
Better yet, feed it to your wood chipper.  That should result in 
unreadable, unrecoverable encryption.  Highly recommended by Grandpa 
Gene. ;-)

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Some mill pix are at:
Genes Web page <http://geneslinuxbox.net:6309/gene/GO704-pix>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

grub2 security problem Michael Fothergill <michael.fothergill@googlemail.com> - 2015-12-19 10:40 +0100
  Re: grub2 security problem Joe <joe@jretrading.com> - 2015-12-19 10:50 +0100
  Re: grub2 security problem Teemu Likonen <tlikonen@iki.fi> - 2015-12-19 10:50 +0100
  Re: grub2 security problem Brad Rogers <brad@fineby.me.uk> - 2015-12-19 13:10 +0100
    Re: grub2 security problem Michael Fothergill <michael.fothergill@googlemail.com> - 2015-12-19 13:20 +0100
  Re: grub2 security problem Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2015-12-19 18:20 +0100
    Re: grub2 security problem David Christensen <dpchrist@holgerdanske.com> - 2015-12-20 05:10 +0100
      Re: grub2 security problem Anders Andersson <pipatron@gmail.com> - 2015-12-20 16:10 +0100
        Re: grub2 security problem <tomas@tuxteam.de> - 2015-12-20 16:30 +0100
          Re: grub2 security problem Gene Heskett <gheskett@shentel.net> - 2015-12-20 16:50 +0100
      Re: grub2 security problem Pascal Hambourg <pascal@plouf.fr.eu.org> - 2015-12-20 17:10 +0100

csiph-web