Collaborate Disseminate
I’d like to have your opinion about if a UEFI rootkit could infect a kernel inside an ISO that is saved in a bootable usb “distro”. I mean I have a usb stick with installed easy2boot. Inside easy2boot there are various ISOs which can be bo… Continue reading UEFI rootkit could infect a kernel of an iso inside an other iso?
I can read on many pages that when you update your BIOS/UEFI, you need to suspend BitLocker (for information, mine is configured to ask for a password at startup, no TPM in my machine).
But none of these pages tell on which devices you ha… Continue reading BIOS/UEFI update and BitLocker suspension [migrated]
I use dd to “burn” an ISO file to USB stick:
dd bs=4M if=/mnt/media/ISO/Fedora-Workstation-Live-x86_64-31-1.9.iso of=/dev/sdd conv=fdatasync status=progress
Now I can see several partitions has been created:
I realise that similar questions have been asked before regarding the EFI System Partition, but I just cannot seem to get my head around this, or indeed get a direct answer.
When I boot into Linux, my files are protected, al… Continue reading How is an EFI partition secure?
Windows Server using a IEEE-1667 drive allows hardware based encryption on the fly.
What are our options when using two disks with a RAID controller, in order to achieve redundancy and parity (T10-DIF)? Is it possible, the booting RAID co… Continue reading RAID + IEEE1667 + TPM + UEFI
Can a website exploit kit theoretically contain a bootkit (it flashes your UEFI/BIOS)?
Many Windows drivers permit malware to access anything, subverting controls that separate user space from the kernel.
The post Screwed Drivers: Windows Third-Party Device Code is Huge Mess appeared first on Security Boulevard.
Continue reading Screwed Drivers: Windows Third-Party Device Code is Huge Mess
I’m interested in setting up a dual boot installation of Windows 10 and MX Linux using the instructions detailed at https://mxlinux.org/wiki/system/uefi/#windows. Is it OK to set up UEFI dual-boot and not enabling secure boot… Continue reading Dual Booting MX Linux and Windows 10 with UEFI
In late March 2019, we briefly highlighted our research on ShadowHammer attacks, a sophisticated supply chain attack involving ASUS Live Update Utility. Now it is time to share more details about the research with our readers. Continue reading Operation ShadowHammer: a high-profile supply chain attack
My laptop is encrypted with BitLocker with TPM-Only protection and Secure Boot is enabled. Since I do not have any UEFI password set to prevent changes to the UEFI firmware settings, will an attacker still be able to read and… Continue reading BitLocker Encrypted Hard drive without UEFI/BIOS Password set?