News for hackers. Stuff that matters.
Re:Bypass kernel lockdown/UEFI secure boot on Ubuntu 18.04 w... by stefan_ on Monday June 15, 2020 @10:05AM (#23527421)
This "security" protects the kernel and the boot chain, not any user data. You will find people care very little about the security of their didn't-even-know-it-existed-kernel when it protects purely against a scenario in which all their fricking data is already considered compromised.
Re:Bypass kernel lockdown/UEFI secure boot on Ubuntu 18.04 w... by anonymousDan on Monday June 15, 2020 @02:02PM (#23530715)
It's an interesting point, but surely it is useful to know when you have been compromised (e.g. to change passwords)?What about post-infection where you want to e.g. clean up the machine without reinstalling the OS unnecessarily? Or in general preventing rootkits from persisting across reboots will at least help to prevent new data being exposed?
Re:Bypass kernel lockdown/UEFI secure boot on Ubuntu 18.04 w... by loeg on Monday June 15, 2020 @02:29PM (#23531125)
The only way to actually protect user data is to chain trust off the protected bootloader and kernel. Secureboot is necessary, but not sufficient.