The State Of Linux Distributions Handling SecureBoot

[JanC]

MS essentially said... "Lets make up some imaginary boot loader virus so we can fuck linux!"

Windows 8 is still gonna get just as comprimised as every other windows has ever been. And booting linux doesnt have a single damn thing to do with that.

There are linux & unix bootkits too, even more, there is at least one PoC research bootkit that attacks both Windows AND linux...

[JanC]

I remember the Stoned MBR boot virus, but it was easy to fix, as is many of them *if* you have a bootable CD/DVD, you can just clobber the MBR accordingly (tough, if the virus installed DLLs/DSOs, kernel modules whatever then you need to do a audit of system which isn't too difficult with deb or RPM based packages (checksums), worse if those got compromised somehow, while on a recovery DVD, you could just clobber the essential DSOs (libraries), kernel modules etc (with compatible older package versions)

Having to boot from a bootable CD/DVD on every reboot to make sure that what you boot is okay is not very user-friendly, is it? (Not to mention that any capable IT department disables booting from external media, and they sure don't want to check thousands of PCs like that every week either.)

[smitty3268]

Stating your insult is worthwhile, but stating the reason to do so is not. I rest my case .

No, it wasn't worthwhile either, as evidenced by this conversation.

[Rexilion]

I really don't think that would be worthwhile. It wouldn't be anything that hasn't already been said 100 times.

Stating your insult is worthwhile, but stating the reason to do so is not. I rest my case .

[smitty3268]

Care to elaborate your insult? This is a forum, people state opinions. Those cannot be wrong. What facts are incorrect?

I really don't think that would be worthwhile. It wouldn't be anything that hasn't already been said 100 times.

[Rexilion]

I read half this thread, and now feel dumber for doing so.

It's incredible how completely stupid some people are, how they are so sure of themselves when they are talking complete crap that is factually wrong.

Care to elaborate your insult? This is a forum, people state opinions. Those cannot be wrong. What facts are incorrect?

[smitty3268]

Wow

I read half this thread, and now feel dumber for doing so.

It's incredible how completely stupid some people are, how they are so sure of themselves when they are talking complete crap that is factually wrong.

[mjg59]

That is sooooo much crap. What if you need to boot a small linux distro thats sole purpose is to circomvent windows user passwords? I do it on a regular basis as a repair tech. Is secureboot going to allow that perfectly valid usage? I doubt it.

It already does.

[duby229]

Then please explain Microsoft distributing signed bootloader binaries.

To put it in analogy with your story: You can throw rocks at my window as long as I inspected and signed them...

That is sooooo much crap. What if you need to boot a small linux distro thats sole purpose is to circomvent windows user passwords? I do it on a regular basis as a repair tech. Is secureboot going to allow that perfectly valid usage? I doubt it.

[Rexilion]

MicroSuck fixed their problem by restricting others freedom.

It is like I (MicroSuck) am the richest and nasties guy in town and because of that kids don't like me and throw rocks on my windows. So what I do? I make the mayor (OEMs), which I hold by the balls, put barriers and guards on the public road so nobody can walk around without my permission.

Then please explain Microsoft distributing signed bootloader binaries.

To put it in analogy with your story: You can throw rocks at my window as long as I inspected and signed them...