4 ms·

Computers that support “secure boot” or “verified boot,” such as Chromebooks and Windows laptops with BitLocker, aren’t vulnerable to this. The BIOS can detect

Computers that support “secure boot” or “verified boot,” such as Chromebooks and Windows laptops with BitLocker, aren’t vulnerable to this. The BIOS can detect if the unencrypted part of your disk has been tampered with, and if it has, it will refuse to boot. MacBooks and laptops that run Linux could potentially be attacked in this way. Really? (Search terms used: "secure boot linux" and "secure boot macbook") https://www.linuxjournal.com/content/take-control-your-pc-uefi-secure-boot https://www.linuxjournal.com/content/take-control-your-pc-ue... https://www.macworld.com/article/3246208/macs/how-apples-startup-security-utility-and-secure-boot-works.html https://www.macworld.com/article/3246208/macs/how-apples-sta...

indemnity 9y ago
Mac secure boot is currently only supported on the iMac Pro, not any MacBook as far as I am aware. Rather less likely to be lugging that through customs :)
agorabinary 9y ago
Also curious about Linux vulnerabilities to this particular attack - any Linux wizards in thread?
- tombrossman 9y ago
  Not a Linux wizard but as a long time user, I remembered this 2012 news from Canonical: http://blog.canonical.com/2012/06/22/an-update-on-ubuntu-and-secure-boot/ http://blog.canonical.com/2012/06/22/an-update-on-ubuntu-and... Perhaps the author meant there was no 'universal' Linux implementation, however it's been available for a while in certain distros.