News for hackers. Stuff that matters.

A comment on Linux Kernel Lockdown and UEFI Secure Boot. Parent comment

Re:Linux Kernel Lockdown and UEFI Secure Boot by Jasper_ on Thursday April 05, 2018 @11:47AM (#16765967)
You're suggesting a construction like Blue Pill[0], right, where you have a "malware hypervisor"? The concept is known, security people are aware, it's considered moderately infeasible, and multiple techniques can prevent it[1].

[0] https://en.wikipedia.org/wiki/Blue_Pill_(software) [1] http://northsecuritylabs.blogspot.com/2008/06/catching-blue-...

[ Parent | on HN ]
Re:Linux Kernel Lockdown and UEFI Secure Boot by caf on Thursday April 05, 2018 @08:12PM (#16769950)
That mitigation technique relies on the anti-malware executable starting before the malware does.
[ Parent | on HN ]