The boot tag has no wiki summary.
7
votes
3answers
413 views
How effective is something like Deep Freeze against boot sector infections?
I work for an embedded system manufacturer and on our older generation systems, which are powered by Windows Embedded, a number of customers have been experiencing virus infections. Due to the real ...
5
votes
1answer
222 views
TPM bootstrap process
Assume that the file partition where the PC operating system and user data reside are sealed by a number of PCRs (Platform Configuration Registers) dedicated to BIOS measurements. What happens during ...
4
votes
2answers
245 views
Detect changes in /boot when using full disk encryption
When running a fully encrypted linux system using dm-crypt, the /boot partition has to be unencrypted to boot, as far as I know. I've setup a server that can be unlocked remotely by connecting to a ...
4
votes
2answers
192 views
How is hibernation supported, on machines with UEFI Secure Boot?
I've been learning about UEFI Secure Boot, which attempts to prevent "bootkits" by locking down the boot process so that only signed bootloaders and kernels can be loaded.
Hibernation seems like a ...
3
votes
2answers
514 views
Impact of Mathew Garrett's Secure GRUB Bootloader on UEFI Secure Boot
My eyebrows rose with Matthew Garrett announcing his Secure GRUB Bootloader less than three hours after no longer being a Red Hat employee. This work and its impact on the trust chain design of the ...
3
votes
2answers
206 views
Is there a reliable way to simulate “Evil Maid Attack” boot path tampering when using bitlocker?
Suppose you have a system whose OS drive is encrypted with bitlocker and uses TPM + PIN authentication to authenticate the boot path against tampering. As I understand it, this setup theoretically ...
3
votes
1answer
225 views
How does UEFI Secure Boot prevent “evil twin” spoofing attacks?
I've been learning about UEFI Secure Boot. It is designed to prevent malware from infecting the boot process and overwriting the bootloader. It has hardware-level protections to ensure that only a ...
2
votes
3answers
255 views
Is there such thing as a password enforced write protected flash drive?
We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate.
...
-2
votes
0answers
8 views
where should I put a malware to load it at boot on ubuntu?
I want to analysis my ubuntu box to detect if it was been hacked.
In your opinion what are the best place where to put a malware to autoload it ?
I am talking about a lkm rootkit and in my thesis the ...
-2
votes
1answer
157 views
How do I remove a root kit from Windows XP? [closed]
I was looking for root kits following these instructions
http://computersight.com/software/how-to-manually-remove-rootkit/
and saw this in my boot log:
Loaded driver ...
