Questions tagged [boot]

"Booting" is the process of starting up a computer from the OFF state. This tag is for attacks and security measures relating to the startup routine of computer hardware, firmware, or operating systems.

Filter by
Sorted by
Tagged with
0 votes
1 answer
57 views

OS on external drive -- is it safe?

So I'm installing macOS to my external hard drive partition, so I can have a 100% clean environment where I can engage with cryptocurrencies. (Exchanges, stable coins, protocols, putting actual money ...
user avatar
1 vote
0 answers
68 views

Is grub implementation of secure boot inherently flawed?

Definitions Grub is the second stage bootloader often found in Linux distributions. shim is the first bootloader ran by the ROM firmware. It is signed by Microsoft. ROM firmware is the code embedded ...
user avatar
0 votes
1 answer
196 views

Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]

Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
user avatar
2 votes
1 answer
264 views

Are there any Linux distributions with enabled TPM2 and full disk encryption setups

I have been searching the web to find a Linux distribution, preferrably a rolling release one as I'm otherwise hooked on the concepts in Arch Linux, with automated steps to setup full disk encryption (...
user avatar
  • 121
0 votes
0 answers
76 views

How to execute Android verified boot during first boot after updating OS in Android?

I need to execute AVB (Android verified boot) during first boot after updating Android OS. BOARD_AVB_ENABLE = true is already present in the mk file device/hikey/common/BoardConfigCommon.mk in the ...
user avatar
14 votes
6 answers
7k views

What's stopping someone from copying my HDD/SSD?

Let's say I have to leave my computer unattended and turned off for a while with some strangers, is it possible for someone to clone my HDD and SSD data?
user avatar
  • 265
1 vote
1 answer
489 views

Will encrypting a dual boot OS prevent viruses from spreading between the two?

Will encrypting a dual boot OS prevent viruses from spreading between the two? Also does linux have any MBR viruses? Will locking the bios in Windows and GRUB stop viruses from attaching and ...
user avatar
1 vote
1 answer
150 views

Is it easy to create persistent programs that run before Android's boot? (in firmware maybe)

I've been wondering about which level of trust I can apply to a used phone bought from someone else. I can easily unlock the bootloader and flash a brand new Android. However, what about firmware ...
user avatar
  • 113
1 vote
0 answers
99 views

Aren't these "new" self-programmable gaming mouses a new security threat? [duplicate]

I have recently bought one of the recent "best" USB gaming mouses out there. The thing that is bothering that the marketing material says it contains a self-programmable computer embedded in ...
user avatar
1 vote
0 answers
128 views

Entered FDE password in GRUB by mistake

For several reasons (I have an external monitor, etc.) when I booted the laptop I typed the FDE (Full Disk Encryption on Linux, LUKS) without looking at the monitor, and I ended up typing the full ...
user avatar
  • 15.3k
4 votes
1 answer
266 views

Why does openSUSE sporadically prompt during boot to trust its built-in certificate?

The conundrum My wife’s laptop has been running openSUSE Leap 15.0 for several years, and she has once or twice been flummoxed by this prompt at the very beginning of the boot sequence, most recently ...
user avatar
  • 143
-1 votes
1 answer
363 views

Booting from an external drive on work laptop (privacy)

Hi guys the company I work for gave me an awesome laptop but I don't want them to spy on my personal activities (they have lots of Spyware and security). I am, however, able to boot from an external ...
user avatar
  • 1
2 votes
1 answer
335 views

Understanding Secure Boot

I'm trying to understand the secure boot process of an OS but there are few points I can't wrap my head around. At a high level, afaik, secure boot ensures that the loaded OS is authenticated by its ...
user avatar
0 votes
1 answer
1k views

What is difference running Linux by live USB vs. by VirtualBox?

Can an expert please explain me which of following three methods working with an OS is technically considered more "secure" - and why (pros/cons)? Security I mean aspects like: -preventing any ...
user avatar
1 vote
1 answer
1k views

Why authenticated boot not Secure boot?

Context: Secure boot is one of the important elements of Trusted Computing in computer system. One variety of the Secure boot is authenticated boot. While secure boot prevent the boot of a non trusted ...
user avatar
  • 269
1 vote
3 answers
997 views

Why after dd'ing ISO file to entire USB flash device, only the first partition match the ISO checksum? [closed]

I use dd to "burn" an ISO file to USB stick: dd bs=4M if=/mnt/media/ISO/Fedora-Workstation-Live-x86_64-31-1.9.iso of=/dev/sdd conv=fdatasync status=progress Now I can see several partitions has ...
user avatar
  • 113
0 votes
1 answer
144 views

TrueCrypt "silently" updated bootloader

I have just updated TrueCrypt from version 7.1a to 7.2. Upon next system restart I have noticed that bootloader was updated as well, because it now shows message about TrueCrypt being not safe. There ...
user avatar
  • 3,287
1 vote
1 answer
504 views

Preventing boot from USB on Dell Inspiron 5559

So what I am looking for is a way to prevent anyone from booting from a USB drive on this specific Dell Inspiron 5559. so normally what I would have to do is to set an Admin password in BIOS that ...
user avatar
  • 11
0 votes
1 answer
1k views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
user avatar
  • 1
2 votes
1 answer
449 views

Is it a security concern to publish the current boot_id?

On linux, a machine comes with a machine_id. From the man page, it is said to be considered as "confidential" and must not be exposed to unstrusted parties. Should the boot_id (from /proc/sys/kernel/...
user avatar
  • 199
2 votes
1 answer
272 views

What can a compromised firmware (UEFI) do after the hard-disk has been wiped?

I might be mistaken, but it seems the firmware (UEFI) needs to load some stuff from the disk to be able to do anything really interesting, like loading some advanced tools or loading the OS. Yet ...
user avatar
  • 15.3k
-1 votes
2 answers
158 views

USB bootable CD protect against rootkits?

I have a infected computer, which I am trying to diagnose. The attack is probably very sophisticated, and I am not yet sure whether this has happened in the bios, mbr, active partition or any other ...
user avatar
2 votes
2 answers
236 views

What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)

I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
user avatar
2 votes
1 answer
214 views

Why are pins required on boot on devices with fingerprint readers? [duplicate]

Both my iPad and my android phone are configured to allow access via either a pin, or a fingerprint scan. However, immediately after a reboot, neither device allows a fingerprint for the first unlock; ...
user avatar
  • 251
1 vote
2 answers
171 views

Can a laptop be monitored when booted from external drive?

If a laptop is monitored (say from employer) and I boot it from an external USB hard drive or a LIVE-CD/USB-Stick, can it then still be monitored somehow?
user avatar
0 votes
1 answer
164 views

Security/Privacy OS With Boot On Thumbdrive

I am looking for a security-centered Linux OS that allows you to take the /boot partition on a thumb-drive to alleviate concerns of an Evil Maid Attacks! What OS is it easy to remove the /boot ...
user avatar
2 votes
2 answers
286 views

Can malware migrate between OSes on the same machine?

Someone here at work just made an interesting claim; they stated that it's possible for malware, launched in e.g. Windows, to remain in RAM through a reboot and continue working in Linux on the ...
user avatar
  • 196
2 votes
1 answer
877 views

using secure boot in embedded systems

The whole idea about using Secure Boot in Embedded Systems to boot an operating system is new to me. I've never paid much attention to it previously. I just know that it prevents the loading at start-...
user avatar
1 vote
2 answers
669 views

Android OS verity signature bypass

I am just getting into custom firmware and rooting phones. I have a phone that appears to be unrootable for whatever reason due to a locked bootloader. The private key was never released and we only ...
user avatar
1 vote
1 answer
147 views

Can a Windows program compromise the desktop hardware without giving administrator rights?

If I run a program on a Windows 10 machine, can the program install a virus on an attached USB drive, and can it install a virus into the firmware of the computer to be loaded before the OS/bootloader?...
user avatar
1 vote
2 answers
771 views

Can dual-boot, encrypted Windows 7 installations be fairly well secured against each other?

We have corporate network where remote workers connect via encrypted latops (Windows 7) using VPN (Cisco AnyConnect client), log into the Windows domain and access their network shares, Outlook e-...
user avatar
  • 113
1 vote
1 answer
342 views

Verifying that the CRTM is read-only for the purpose of trusted computing

When using a TPM to provide integrity measurements for a system via SRTM, the trusted computing base is reduced to only the TPM and CRTM. The CRTM is a component of the BIOS (specifically the ...
user avatar
  • 64k
5 votes
2 answers
3k views

securing Ubuntu bootloader using TPM

I am currently working with Ubuntu 16.04 , with an Intel CPU that supports TPM2 module. I am trying to harden my boot-loader, i tried using trustedgrub2 fork that supports TPM2 , i understand that ...
user avatar
5 votes
2 answers
3k views

Is Secure Boot really Secure?

I found the concept of Secure Boot quite intriguing. I can't say that I know much about it because I don't but I believe I understand the main concept of it. Secure Boot verifies the signature of the ...
user avatar
  • 137
2 votes
1 answer
1k views

Can malware have its own GRUB/boot-loader and use it to be active?

I use Ubuntu 16.04. After I mounted an ISO which may or may not have had malware in it, my system sometimes ends up showing a blank screen after logging into Ubuntu or reboots a minute or two after I ...
user avatar
  • 351
4 votes
1 answer
9k views

Full disk encryption on dual boot system (Truecrypt/Veracrypt)

I am looking to run my laptop system with a dual boot configuration (Fedora + Windows) with full disk encryption. I have a laptop that I will be bringing with me while traveling, both domestically ...
user avatar
  • 141
3 votes
3 answers
872 views

Will converting a MBR disk to GPT, formatting and the converting back to MBR remove a infected boot record.

Will converting a MBR disk to GPT, formatting and the converting back to MBR remove a infected boot record. I am looking into writing a little program that will take a connected USB with a MBR ...
user avatar
  • 133
1 vote
2 answers
1k views

Would it add security to set a GRUB password if HDDs are encrypted and UEFI settings can be opened anyway?

So I'm using Debian 9.1 with KDE and have my hard drives encrypted. Now I'm wondering whether to additionally add a GRUB password as described here. Would that make sense? As the hard drives are ...
user avatar
2 votes
1 answer
971 views

System encryption on a uefi system?

I was thinking about encrypting my ssd(just out of curiosity, mostly) and was wondering the possible security threats an unencrypted /boot partition can pose(if any). I know that I can encrypt the ...
user avatar
  • 123
9 votes
2 answers
1k views

Android verified boot within the boot sequence

I'm interested in understanding the verified boot process in Android, yet I was unable to find insights about some properties of the process. From what I gathered so far I get that in Android devices ...
user avatar
  • 201
0 votes
1 answer
1k views

Exploiting a Linux startup script that is world writable

What are startup scripts in Linux and what are the steps to exploit startup scripts if they are world writable? I would appreciate if one can explain based on the following two files as example in ...
user avatar
  • 549
3 votes
1 answer
170 views

How does Android prevent me from installing custom system services?

I am trying to understand the secure boot process. Lets say the firmware is locked and only does signed installation of an OS image. This "image" is a compressed bundle of all the binaries needed by ...
user avatar
1 vote
1 answer
161 views

Does periodically rebooting secure-boot-enabled devices improve security by preventing persistent compromise?

Many devices now enforce verified/trusted/secure boot, which according to Wikipedia "will only allow signed software to run on the device." Platforms that support this feature include Android, iOS, ...
user avatar
  • 698
1 vote
0 answers
578 views

How is hardware based chain of trust implemented in practice for secure boot?

To do secure boot we need an immutable public key baked into the ROM. This key is used to sign the boot loader or the key used to sign the boot loader. I have these questions - Which code does this ...
user avatar
1 vote
0 answers
586 views

How to launch kali Linux installer inside live version

i need to know how I can launch the kali Linux installer through terminal pleas. Running latest version of kali Linux on LIVE USB. Trouble booting with uefi and so forth so I need to know how to ...
user avatar
5 votes
4 answers
24k views

VeraCrypt - Windows boots Automated Repair on UEFI/GPT

OK. So I used VeraCrypt to encrypt the system partition and now Windows boots its automated repair only. After the repair in what I think is Windows Recovery Environment I can choose to boot off USB ...
user avatar
0 votes
1 answer
231 views

Should a secure boot process be aware of the peripherals/hardware?

I know the question is rather broad because I am not specifying which hardware and which OS, but that is intentional. I know there should be a root of trust verification in hardware (ROM) before the ...
user avatar
3 votes
1 answer
506 views

Windows Secure Boot compromise: are fully-patched PCs vulnerable?

Are fully-patched (as of Aug. 10, 2016) Windows installs vulnerable to allowing self-signed early-boot malware to run- because of this ? If so, which versions of Windows are vulnerable. What in ...
user avatar
2 votes
1 answer
219 views

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

My Thinkpad might have been hacked and I know this sounds a little far-fetched, but I suspect the BIOS might have also been hacked. Would turning it off by holding the power button for a few seconds ...
user avatar
9 votes
2 answers
1k views

UEFI Firmware integrity measurement

We know that UEFI measures the OS bootloader image integrity every time we power on our computer if secure boot is enabled. With the growing attacks and discoveries of UEFI vulnerabilities, the ...
user avatar
  • 375