News for hackers. Stuff that matters.
Re:Grub2 security update renders system unbootable by jchw on Thursday July 30, 2020 @01:26PM (#24000755)
In my opinion, the true antidote is reproducible, and ideally immutable, systems. Maybe this bug would’ve been harder since it’s all the way back to the bootloader, but assuming a more minimal bootloader (perhaps EFIstub directly, or systemd-boot,) you could have something like NixOS where you can, at boot time, jump to a previous configuration with all of the old software.

(Works even better for docker or VM images where you have a supervisor that can move around disk images. Can just construct immutable root images and roll back by booting with an older one.)

There are no comments on this comment yet.