Hot answers tagged

92

The main thing that is happening is that the bug is being seriously overhyped. Exploiting this vulnerability requires physical access to the computer during startup, and if you've got physical access, there are about a zillion ways you can bypass security. The bug is about bypassing Grub2's internal password protection. Most users don't password-protect ...


36

Your question is the first I've heard of this. Based on the articles you presented though you're probably plenty safe for 2 reasons: A) The first article you linked says that the major distros have already patched this. If you keep up to date like you said, it should be fine. If not, the same article says the researchers who found the bug have released a ...


7

Best option is just to encrypt the Linux partition, e.g. with LUKS. That way the Windows 7 partition can't actually access any of the data on the other partition. Technically it can still read and write to the partition (there's no way to prevent this) but the data it sees is all encrypted.


6

This depends what you mean by “the overall concept of secure boot”. Pretty much all secure boot systems have several components, starting with one in ROM and ending with an operating system or even programs within that operating system. A typical boot chain is ROM → OEM bootloader → OS bootloader → OS kernel → OS startup programs. A typical secure boot ...


2

There are some variables to take into account. First of all it's not trivial to just access the Linux partitions. Mainly because, natively, Windows does not support ext3 or ext4 which are used to install Linux on. Without these drivers it's impossible to access the drives. Malware will, normally, not have onboard read/write drivers for these filesystems. ...


2

This is using Trusted Platform Module to defeat the Evil Maid Attack. In short this is to insure that your bootloader hasn't been tampered with, which could undermine an encrypted file system.


1

The TPM support is very rudimentary at this time. You'll need a bootloader that can extend the chain of trust and I only know of TrustedGRUB which is a pretty old version of GRUB with TPM-related functionalities added. On the other hand, I believe the TPM is just all hype related to Bitlocker, practically it provides very little security (maybe that's by ...


1

I recommend locking down GRUB and taking away access to the GRUB shell. GRUB manual: Authentication and authorisation (Archived here.) By default, the boot loader interface is accessible to anyone with physical access to the console: anyone can select and edit any menu entry, and anyone can get direct access to a GRUB shell prompt. For most systems, ...



Only top voted, non community-wiki answers of a minimum length are eligible