Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [boot]

"Booting" is the process of starting up a computer from the OFF state. This tag is for attacks and security measures relating to the startup routine of computer hardware, firmware, or operating systems.

2
votes
1answer
147 views

Why are pins required on boot on devices with fingerprint readers? [duplicate]

Both my iPad and my android phone are configured to allow access via either a pin, or a fingerprint scan. However, immediately after a reboot, neither device allows a fingerprint for the first unlock; ...
1
vote
2answers
41 views

Can a laptop be monitored when booted from external drive?

If a laptop is monitored (say from employer) and I boot it from an external USB hard drive or a LIVE-CD/USB-Stick, can it then still be monitored somehow?
0
votes
1answer
33 views

Security/Privacy OS With Boot On Thumbdrive

I am looking for a security-centered Linux OS that allows you to take the /boot partition on a thumb-drive to alleviate concerns of an Evil Maid Attacks! What OS is it easy to remove the /boot ...
1
vote
2answers
149 views

Can malware migrate between OSes on the same machine?

Someone here at work just made an interesting claim; they stated that it's possible for malware, launched in e.g. Windows, to remain in RAM through a reboot and continue working in Linux on the ...
1
vote
1answer
79 views

using secure boot in embedded systems

The whole idea about using Secure Boot in Embedded Systems to boot an operating system is new to me. I've never paid much attention to it previously. I just know that it prevents the loading at start-...
0
votes
1answer
120 views

Android OS verity signature bypass

I am just getting into custom firmware and rooting phones. I have a phone that appears to be unrootable for whatever reason due to a locked bootloader. The private key was never released and we only ...
1
vote
1answer
87 views

Can a Windows program compromise the desktop hardware without giving administrator rights?

If I run a program on a Windows 10 machine, can the program install a virus on an attached USB drive, and can it install a virus into the firmware of the computer to be loaded before the OS/bootloader?...
1
vote
2answers
640 views

Can dual-boot, encrypted Windows 7 installations be fairly well secured against each other?

We have corporate network where remote workers connect via encrypted latops (Windows 7) using VPN (Cisco AnyConnect client), log into the Windows domain and access their network shares, Outlook e-...
1
vote
0answers
70 views

Verifying that the CRTM is read-only for the purpose of trusted computing

When using a TPM to provide integrity measurements for a system via SRTM, the trusted computing base is reduced to only the TPM and CRTM. The CRTM is a component of the BIOS (specifically the ...
0
votes
0answers
84 views

How to sign bootloader?

I am looking for a way to sign my Ubuntu bootloader. I also have a TPM2 chip and an ability to do secureboot. Any suggestions?
5
votes
2answers
231 views

securing Ubuntu bootloader using TPM

I am currently working with Ubuntu 16.04 , with an Intel CPU that supports TPM2 module. I am trying to harden my boot-loader, i tried using trustedgrub2 fork that supports TPM2 , i understand that ...
0
votes
0answers
36 views

Run Single User Mode with Secure Boot active

I am investigating an embedded system using a Linux Kernel, with UEFI, Secure Boot enabled and no bootloader (e.g. LILO, Grub...). Could I somehow boot the device into Single User Mode? I think Secure ...
1
vote
2answers
650 views

Is Secure Boot really Secure?

I found the concept of Secure Boot quite intriguing. I can't say that I know much about it because I don't but I believe I understand the main concept of it. Secure Boot verifies the signature of the ...
1
vote
1answer
232 views

Can malware have its own GRUB/boot-loader and use it to be active?

I use Ubuntu 16.04. After I mounted an ISO which may or may not have had malware in it, my system sometimes ends up showing a blank screen after logging into Ubuntu or reboots a minute or two after I ...
0
votes
0answers
16 views

Is managing your keystore files on bootable OS safe?

As cryptocurrencies grow, there is a number of cases when private keys and keystore files are being stolen by some malicious programs or viruses. Question: How safe it is to boot another OS (e.g. ...
3
votes
1answer
3k views

Full disk encryption on dual boot system (Truecrypt/Veracrypt)

I am looking to run my laptop system with a dual boot configuration (Fedora + Windows) with full disk encryption. I have a laptop that I will be bringing with me while traveling, both domestically ...
3
votes
3answers
370 views

Will converting a MBR disk to GPT, formatting and the converting back to MBR remove a infected boot record.

Will converting a MBR disk to GPT, formatting and the converting back to MBR remove a infected boot record. I am looking into writing a little program that will take a connected USB with a MBR ...
1
vote
2answers
432 views

Would it add security to set a GRUB password if HDDs are encrypted and UEFI settings can be opened anyway?

So I'm using Debian 9.1 with KDE and have my hard drives encrypted. Now I'm wondering whether to additionally add a GRUB password as described here. Would that make sense? As the hard drives are ...
2
votes
1answer
337 views

System encryption on a uefi system?

I was thinking about encrypting my ssd(just out of curiosity, mostly) and was wondering the possible security threats an unencrypted /boot partition can pose(if any). I know that I can encrypt the ...
5
votes
0answers
270 views

Android verified boot within the boot sequence

I'm interested in understanding the verified boot process in Android, yet I was unable to find insights about some properties of the process. From what I gathered so far I get that in Android devices ...
0
votes
1answer
541 views

Exploiting a Linux startup script that is world writable

What are startup scripts in Linux and what are the steps to exploit startup scripts if they are world writable? I would appreciate if one can explain based on the following two files as example in ...
3
votes
1answer
122 views

How does Android prevent me from installing custom system services?

I am trying to understand the secure boot process. Lets say the firmware is locked and only does signed installation of an OS image. This "image" is a compressed bundle of all the binaries needed by ...
1
vote
1answer
97 views

Does periodically rebooting secure-boot-enabled devices improve security by preventing persistent compromise?

Many devices now enforce verified/trusted/secure boot, which according to Wikipedia "will only allow signed software to run on the device." Platforms that support this feature include Android, iOS, ...
1
vote
0answers
375 views

How is hardware based chain of trust implemented in practice for secure boot?

To do secure boot we need an immutable public key baked into the ROM. This key is used to sign the boot loader or the key used to sign the boot loader. I have these questions - Which code does this ...
1
vote
0answers
470 views

How to launch kali Linux installer inside live version

i need to know how I can launch the kali Linux installer through terminal pleas. Running latest version of kali Linux on LIVE USB. Trouble booting with uefi and so forth so I need to know how to ...
2
votes
3answers
10k views

VeraCrypt - Windows boots Automated Repair on UEFI/GPT

OK. So I used VeraCrypt to encrypt the system partition and now Windows boots its automated repair only. After the repair in what I think is Windows Recovery Environment I can choose to boot off USB ...
0
votes
1answer
164 views

Should a secure boot process be aware of the peripherals/hardware?

I know the question is rather broad because I am not specifying which hardware and which OS, but that is intentional. I know there should be a root of trust verification in hardware (ROM) before the ...
3
votes
1answer
294 views

Windows Secure Boot compromise: are fully-patched PCs vulnerable?

Are fully-patched (as of Aug. 10, 2016) Windows installs vulnerable to allowing self-signed early-boot malware to run- because of this ? If so, which versions of Windows are vulnerable. What in ...
2
votes
1answer
89 views

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

My Thinkpad might have been hacked and I know this sounds a little far-fetched, but I suspect the BIOS might have also been hacked. Would turning it off by holding the power button for a few seconds ...
7
votes
2answers
506 views

UEFI Firmware integrity measurement

We know that UEFI measures the OS bootloader image integrity every time we power on our computer if secure boot is enabled. With the growing attacks and discoveries of UEFI vulnerabilities, the ...
0
votes
0answers
61 views

Will zero-filling empty drive space detect bootkits?

I've heard that bootkits generally write their payload at the end of the drive, and don't register this data with the host OS. Does that mean, that to test for bootkits, I could simply zero-fill all ...
13
votes
1answer
905 views

How are TPMs provisioned for Intel Trusted Execution Environment (TXT)?

For Intel TXT to work, the TPM must be provisioned. Intel provides some tools for doing this but many are protected by non-public login or an NDA. Many OEM platform vendors provision their boards and ...
1
vote
1answer
308 views

Boot-sector virus - can it spread only through floppy disks?

Do boot-sector viruses spread only through floppy discs, and so are the thing of the past, or can they spread through USB, removable hard drives etc? Techopedia states: The propagation of boot ...
2
votes
4answers
368 views

Is a computer more vulnerable if wireless is left on when booting?

Normally I switch off wireless on my laptop before I shut it down but I forgot to do this last night. So this morning, after I booted up the laptop, I saw the wireless notification on the bottom right ...
2
votes
1answer
210 views

How to find out if my MBR has Evil Maid code?

If Truecrypt Bootloader will remain visually the same, how can I find out if it was infected?
3
votes
1answer
260 views

How do boot-sector viruses propagate?

I'm doing research on various malware and I came across boot-sector viruses. Kaspersky states that "they are not designed to infect removable media." My question is, how do they spread then? Again ...
-1
votes
2answers
236 views

How can I prevent booting from media devices?

first of all, I deeply apologise because of my silly question. The thing is that I am learning about hardening. I have VMware workstation 12, and I've created a VM CentOS 7 machine (to be integrated ...
0
votes
2answers
700 views

Best way to make a Linux install tamper proof

Good day, I am currently planning an environment where it comes down to the biggest security risk being to boot to another environment and tamper with the install on the disk (Older PCs with physical ...
2
votes
1answer
566 views

Android Rooting and Evil Maid Attacks

I'm trying to learn more about full disk encryption (in the context of a Linux based server) and what schemes offer true security and which only offer the illusion of security. As I understand it, ...
-2
votes
1answer
600 views

anti cloning hard disk [closed]

I'm trying to create an "anti-cloning" system. I'd like to know if there's a way to check a unique label on the hard disk, during the boot phase, in order to avoid the machine to continue booting if ...
3
votes
1answer
854 views

Is TPM ownership required for secure boot or measured boot?

I know: Secure Boot - can use the TPM Measured Boot - must use the TPM Can anyone intimately familiar with these processes explain if any TPM owner-authorized commands are required or used in these ...
1
vote
1answer
562 views

tpm sealing and secure boot

I have worked with TPM for a while, and I'm interested in some of its features. Especially sealing and the use of TPM's PCRs in the secure boot process. My question is: What is stopping an attacker ...
3
votes
1answer
175 views

What's the point of encrypting /boot or / partition?

I'm not talking about full disk hardware encryption. I'm talking about software encryption. encrypting /home prevents your data after your laptop is stolen. As far as I understand, encrypting / and /...
26
votes
4answers
2k views

How Do Rootkits & Other Low-Level Malware Still Manage to Load on Systems Protected by Secure Boot (and TB/MB)?

Let me try asking my question this way... Let's say that I'm a offensive cyber Bad Guy working for a foreign state-sponsored Advanced Persistent Threat unit. My unit is charged with, say, stealing ...
4
votes
1answer
948 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the quad-...
4
votes
2answers
202 views

Securing the bootloader

When using full disk encryption the bootloader is not encrypted thus allowing attacks like the Evil Maid. My question is how can I secure myself from this? Can I encrypt the drive or store it in a ...
4
votes
2answers
597 views

Preventing boot from external media in case of theft of laptop or physical security breach in case of desktops?

I wanted to protect my Laptop from common theft. What I did was that I installed an anti-theft software on my Ubuntu 14.04. The guest account is enabled so that the thief can use my laptop while I ...
4
votes
1answer
1k views

What is susceptible to Kon Boot hack tool?

I just learned about Kon Boot (from this YouTube video) and am wondering, how is such a hack tool guarded against? In the video the presenter claimed he had full disk encryption but was still able to ...
4
votes
1answer
1k views

Lighteater - BIOS/UEFI vulnerable

I am currently a bit confused, I have read today an article about the BIOS-rootkit Lighteater made by John Loucaides and Andrew Furtaki. In their presentation 'How many million BIOSes would you like ...
0
votes
2answers
1k views

Laptop tampering and boot loader

I try to find out how far I can secure my laptop from physical access and tampering attempts. Setup: ThinkPad with Linux installation What I have done so far: disk encryption using cryptsetup for ...