Conversation

Notices

1. Dushman (dushman@den.raccoon.quest)'s status on Sunday, 10-Dec-2023 18:24:31 JST Dushman

   UEFI secure boot is completely useless if you don't use custom keys

   • :apa: スプリットショックウイルス † (splitshockvirus@mstdn.starnix.network)'s status on Sunday, 10-Dec-2023 18:24:30 JST :apa: スプリットショックウイルス †

     in reply to

     @dushman
     🔒 👢 :soy_right: cc @inference

     † top dog :pedomustdie: likes this.
   • hazlin no plap pirate (hazlin@shortstacksran.ch)'s status on Sunday, 10-Dec-2023 19:33:00 JST hazlin no plap pirate

     in reply to
     @dushman
     > useful against evil maid attacks
     
     Not all of us have the same attack surface as nobility xD
   • hazlin no plap pirate (hazlin@shortstacksran.ch)'s status on Sunday, 10-Dec-2023 19:33:01 JST hazlin no plap pirate

     in reply to
     @dushman I always thought the UEFI and TPM, and what ever that new bios level hard-drive encryption BS, is all about making it more difficult for an end user to control their own device.
   • Dushman (dushman@den.raccoon.quest)'s status on Sunday, 10-Dec-2023 19:33:01 JST Dushman

     in reply to

     • hazlin no plap pirate

     @hazlin@shortstacksran.ch
     I wouldn't say so. I mean you can disable both easy peasy on like any mobo. Secure boot can be useful against evil maid attacks if you use your own keys. The usefulness of TPM in a practical sense is questionable though.

     Machismo repeated this.
   • Eric Zhang 2: Episode 1 (eric@pl.starnix.network)'s status on Sunday, 10-Dec-2023 19:33:14 JST Eric Zhang 2: Episode 1

     in reply to
     @dushman Speaking of which: https://arstechnica.com/security/2023/12/just-about-every-windows-and-linux-device-vulnerable-to-new-logofail-firmware-attack/
     Machismo repeated this.
   • Dushman (dushman@den.raccoon.quest)'s status on Sunday, 10-Dec-2023 19:33:14 JST Dushman

     in reply to

     • Eric Zhang 2: Episode 1

     @eric@pl.starnix.network
     I have it disabled lol. I made it display only diagnostic text on boot, more useful to me. Haven't looked into this though so idk whether or not it would still be possible with a configuration like this.