The boot tag has no wiki summary.
-4
votes
0answers
48 views
Where can I look for malware that may have been installed on my machine?
I want to analysis my ubuntu box to detect if it was been hacked.
My question is:
what are all the place where to look to discover if some malicious software are started ?
The following is some kind ...
3
votes
2answers
208 views
Is there a reliable way to simulate “Evil Maid Attack” boot path tampering when using bitlocker?
Suppose you have a system whose OS drive is encrypted with bitlocker and uses TPM + PIN authentication to authenticate the boot path against tampering. As I understand it, this setup theoretically ...
4
votes
2answers
194 views
How is hibernation supported, on machines with UEFI Secure Boot?
I've been learning about UEFI Secure Boot, which attempts to prevent "bootkits" by locking down the boot process so that only signed bootloaders and kernels can be loaded.
Hibernation seems like a ...
3
votes
1answer
227 views
How does UEFI Secure Boot prevent “evil twin” spoofing attacks?
I've been learning about UEFI Secure Boot. It is designed to prevent malware from infecting the boot process and overwriting the bootloader. It has hardware-level protections to ensure that only a ...
3
votes
2answers
518 views
Impact of Mathew Garrett's Secure GRUB Bootloader on UEFI Secure Boot
My eyebrows rose with Matthew Garrett announcing his Secure GRUB Bootloader less than three hours after no longer being a Red Hat employee. This work and its impact on the trust chain design of the ...
-2
votes
1answer
157 views
How do I remove a root kit from Windows XP? [closed]
I was looking for root kits following these instructions
http://computersight.com/software/how-to-manually-remove-rootkit/
and saw this in my boot log:
Loaded driver ...
5
votes
1answer
223 views
TPM bootstrap process
Assume that the file partition where the PC operating system and user data reside are sealed by a number of PCRs (Platform Configuration Registers) dedicated to BIOS measurements. What happens during ...
4
votes
2answers
247 views
Detect changes in /boot when using full disk encryption
When running a fully encrypted linux system using dm-crypt, the /boot partition has to be unencrypted to boot, as far as I know. I've setup a server that can be unlocked remotely by connecting to a ...
2
votes
3answers
255 views
Is there such thing as a password enforced write protected flash drive?
We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate.
...
7
votes
3answers
414 views
How effective is something like Deep Freeze against boot sector infections?
I work for an embedded system manufacturer and on our older generation systems, which are powered by Windows Embedded, a number of customers have been experiencing virus infections. Due to the real ...
