▲ 88 ▼ New Linux Security Flaw Uses Initramfs to Inject Malware (www.omgubuntu.co.uk) submitted 1 year ago by cm0002@programming.dev to c/linux@programming.dev 23 comments fedilink hide all child comments
[–] just_another_person@lemmy.world 4 points 1 year ago (7 children) Nope permalink fedilink source parent hideshow 7 child comments replies: [–] ulterno@programming.dev 5 points 1 year ago Nope Exactly. Silicon is not a rare earth element. Neither is Aluminium nor plastic nor Lithium (it's getting rarer alright, but doesn't fall into the category). The amount of rare earth elements is really small in these devices. permalink fedilink source parent [–] unexposedhazard@discuss.tchncs.de 3 points 1 year ago (5 children) Explain. The way i understand it, if somebody flashes malware into your firmware or bootloader then that device cant really be guaranteed to ever be safe again. permalink fedilink source parent hideshow 5 child comments replies: [–] 9tr6gyp3@lemmy.world 4 points 1 year ago Secure boot helps protect against evil maid attacks by checking hardware and OS signatures. If the boot process has been tampered with, the user can be alerted that the secure boot process can no longer properly verify signatures. While its probably true that you can no longer guarantee that system can be used safely ever again, at least you will be aware that it was tampered with and you can go ahead and send that system to e-waste and get you a new system. permalink fedilink source parent [–] amino@lemmy.blahaj.zone 2 points 1 year ago* (last edited 1 year ago) i know this is not for PCs but GrapheneOS uses the Google Titan chip and this app to solve that problem. might be a long time before we get similar hardware for PCs. the only thing that's remotely similar is the Apple T2 for MacBooks but there's no Linux distro with comparable security to GrapheneOS yet. permalink fedilink source parent [–] Jumuta@sh.itjust.works 0 points 1 year ago (2 children) a raspi, soic8 clip and coreboot permalink fedilink source parent hideshow 2 child comments replies: [–] amino@lemmy.blahaj.zone 1 point 1 year ago (1 child) isn't coreboot strictly for x86? permalink fedilink source parent hideshow 1 child comment replies: [–] Jumuta@sh.itjust.works 2 points 1 year ago* you use a soic8 clip and the raspi to connect directly to the SPI ROM on some other computer so you can flash coreboot on it without any obstructions permalink fedilink source parent
[–] ulterno@programming.dev 5 points 1 year ago Nope Exactly. Silicon is not a rare earth element. Neither is Aluminium nor plastic nor Lithium (it's getting rarer alright, but doesn't fall into the category). The amount of rare earth elements is really small in these devices. permalink fedilink source parent
[–] unexposedhazard@discuss.tchncs.de 3 points 1 year ago (5 children) Explain. The way i understand it, if somebody flashes malware into your firmware or bootloader then that device cant really be guaranteed to ever be safe again. permalink fedilink source parent hideshow 5 child comments replies: [–] 9tr6gyp3@lemmy.world 4 points 1 year ago Secure boot helps protect against evil maid attacks by checking hardware and OS signatures. If the boot process has been tampered with, the user can be alerted that the secure boot process can no longer properly verify signatures. While its probably true that you can no longer guarantee that system can be used safely ever again, at least you will be aware that it was tampered with and you can go ahead and send that system to e-waste and get you a new system. permalink fedilink source parent [–] amino@lemmy.blahaj.zone 2 points 1 year ago* (last edited 1 year ago) i know this is not for PCs but GrapheneOS uses the Google Titan chip and this app to solve that problem. might be a long time before we get similar hardware for PCs. the only thing that's remotely similar is the Apple T2 for MacBooks but there's no Linux distro with comparable security to GrapheneOS yet. permalink fedilink source parent [–] Jumuta@sh.itjust.works 0 points 1 year ago (2 children) a raspi, soic8 clip and coreboot permalink fedilink source parent hideshow 2 child comments replies: [–] amino@lemmy.blahaj.zone 1 point 1 year ago (1 child) isn't coreboot strictly for x86? permalink fedilink source parent hideshow 1 child comment replies: [–] Jumuta@sh.itjust.works 2 points 1 year ago* you use a soic8 clip and the raspi to connect directly to the SPI ROM on some other computer so you can flash coreboot on it without any obstructions permalink fedilink source parent
[–] 9tr6gyp3@lemmy.world 4 points 1 year ago Secure boot helps protect against evil maid attacks by checking hardware and OS signatures. If the boot process has been tampered with, the user can be alerted that the secure boot process can no longer properly verify signatures. While its probably true that you can no longer guarantee that system can be used safely ever again, at least you will be aware that it was tampered with and you can go ahead and send that system to e-waste and get you a new system. permalink fedilink source parent
[–] amino@lemmy.blahaj.zone 2 points 1 year ago* (last edited 1 year ago) i know this is not for PCs but GrapheneOS uses the Google Titan chip and this app to solve that problem. might be a long time before we get similar hardware for PCs. the only thing that's remotely similar is the Apple T2 for MacBooks but there's no Linux distro with comparable security to GrapheneOS yet. permalink fedilink source parent
[–] Jumuta@sh.itjust.works 0 points 1 year ago (2 children) a raspi, soic8 clip and coreboot permalink fedilink source parent hideshow 2 child comments replies: [–] amino@lemmy.blahaj.zone 1 point 1 year ago (1 child) isn't coreboot strictly for x86? permalink fedilink source parent hideshow 1 child comment replies: [–] Jumuta@sh.itjust.works 2 points 1 year ago* you use a soic8 clip and the raspi to connect directly to the SPI ROM on some other computer so you can flash coreboot on it without any obstructions permalink fedilink source parent
[–] amino@lemmy.blahaj.zone 1 point 1 year ago (1 child) isn't coreboot strictly for x86? permalink fedilink source parent hideshow 1 child comment replies: [–] Jumuta@sh.itjust.works 2 points 1 year ago* you use a soic8 clip and the raspi to connect directly to the SPI ROM on some other computer so you can flash coreboot on it without any obstructions permalink fedilink source parent
[–] Jumuta@sh.itjust.works 2 points 1 year ago* you use a soic8 clip and the raspi to connect directly to the SPI ROM on some other computer so you can flash coreboot on it without any obstructions permalink fedilink source parent