Collaborate Disseminate
I am trying to update my GRUB from 2.06 to 2.12 in order to take advantage of the new support for luks2 disk encryption, but I’ve noticed something strange. There’s very very little discussion of 2.12 online. News outlets reporting that it… Continue reading Why no press over GRUB 2.12rc?
There are many, many questions on askubuntu and other forums about the /etc/default/grub file being overwritten. I have made a custom kali linux live iso (and don’t tell me to not use kali, I have been using it for a very long time on a vi… Continue reading /etc/default/grub and /usr/share/grub/default/grub nonexistant custom kali live iso [closed]
There’s a reasonably well known exploit of Grub/Linux systems that the recovery console can very easily be used to gain root access into a system. (Just set init=/bin/bash before booting).
This is often dismissed as less of a concern becau… Continue reading Is there a safe way to prevent grub from entering recovery console? [closed]
For a brief moment in the late ’00s, netbooks dominated the low-cost mobile computing market. These were small, low-cost, low-power laptops, some tiny enough to only have a seven-inch display, …read more Continue reading An Old Netbook Spills Its Secrets
I encrypted my Ubuntu Desktop 20.04.3 with LVM/LUKS during the installation process. If I turn off the computer, is the brute force the only attack available for getting the password and accessing the files? I think it doesn’t encrypt the … Continue reading Full disk encryption with LUKS?
I have a Dell Inspiron 2n1 laptop which recently noticed that it was affected by a bug called Boot Hole, which is a kind of damn bug that targets GRUB/Linux Secure Boot/Windows. And I might think it’s interfering on both virtualization sof… Continue reading My laptop was affected by Boot Hole bug. What now?
Dualbooting your computer can be a chore, the more switching between OSes you have to do – which is why virtualization or having separate computers are the go-to for many. …read more Continue reading Simple Hardware Switch For OS Dualbooting, Thanks To RP2040
Definitions
Grub is the second stage bootloader often found in Linux distributions.
shim is the first bootloader ran by the ROM firmware. It is signed by Microsoft.
ROM firmware is the code embedded in the hardware which implements the UEF… Continue reading Is grub implementation of secure boot inherently flawed?
First some definitions and common understanding.
The premise of secure boot is that each binary get’s verified before
it is loaded. This starts with the firmware in ROM verifying the EFI
application.
For the case of a Linux boot that EFI … Continue reading How to prevent grub.cfg from breaking the chain of trust?
First some definitions and common understanding.
The premise of secure boot is that each binary get’s verified before
it is loaded. This starts with the firmware in ROM verifying the EFI
application.
For the case of a Linux boot that EFI … Continue reading How to prevent grub.cfg from breaking the chain of trust?