you are viewing a single comment's thread
view the rest of the comments
[–] -3 points 1 year ago (1 child)

I'm well aware. You're proving my point at mount.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    But.. your original comment is just.. wrong?

    This isn't a critical security flaw unless you have the worst partition scheme on your encrypted volumes imaginable.

    The default LUKS partition scheme is vulnerable.

    It's not even a process flaw at that point, just "possible".

    There is a successful POC, it is a flaw.

    you can compromise disks once encrypted because everything is happening in an in-memory boot process.

    This is not just in-memory. This is modifying the unencrypted part of initramfs on disk. Powering off the machine does not remove the exploit.

  • source
  • parent