News for hackers. Stuff that matters.

A comment on Secure Boot and the 2018 MacBook Pro. Parent comment

Re:Secure Boot and the 2018 MacBook Pro by Klathmon on Saturday July 28, 2018 @01:09PM (#17633981)
Don't most bios have a password protect option? That alone makes evil maid attacks significantly harder.
[ Parent | on HN ]
Re:Secure Boot and the 2018 MacBook Pro by sanlyx on Saturday July 28, 2018 @01:16PM (#17634012)
That's the way to go I guess. But secure boot has obvious advantages in comparison. As a rule of thumb I do not trust any client-side "authentication" or passphrase input as long as there's no crypto involved. In legacy BIOS this passphrase can be bypassed easily, for instance
[ Parent | on HN ]
Re:Secure Boot and the 2018 MacBook Pro by Klathmon on Saturday July 28, 2018 @01:26PM (#17634066)
Yes, but it's not either-or, both can be used.

Combined with a TPU that wipes keys when secure boot is enabled/disabled gives a pretty secure system, that still allows you to "eject" to an unsigned boot when needed.

[ Parent | on HN ]