Re:CVE-2023-40547 – avoid incorrectly trusting HTTP headers
by earthling8118 on Friday January 26, 2024 @01:21PM
(#39145945)
Windows is a showstopper itself. It might play nicely sometimes but it isn't a workable solution. I can no longer ever try dual booting because it doesn't respect anything but itself. It'll just decide to get rid of other bootloaders at its own discretion.
Re:CVE-2023-40547 – avoid incorrectly trusting HTTP headers
by Dalewyn on Friday January 26, 2024 @08:37PM
(#39151436)
I'm talking about dumping the subsequent bootloaders such as GRUB to a file located in a Windows-accessible location, and then adding a menu entry for Windows Boot Manager to chainload into it.
As far as I know, Windows doesn't just overwrite the BCD like that unless you explicitly tell it to.
Also, obviously the assumption is Windows isn't a showstopper such as in my case. I'm inquiring if there are any practical or technical concerns that would preclude using WBM as a shim.
Would Windows Boot Manager not serve that purpose also? I have WBM chainloading into GRUB on one of my older BIOS machines, but I never got around to doing that on a UEFI machine so I'm not aware of any showstoppers.