Here are some easy ways to prevent UEFI from tampering with your drive: Disable UEFI. https://github.com/corna/me_cleaner https://github.com/corna/me_cleaner

Here are some easy ways to prevent UEFI from tampering with your drive: Disable UEFI. https://github.com/corna/me_cleaner https://github.com/corna/me_cleaner Disable the ACPI hooks that register the kernel with UEFI. http://heim.ifi.uio.no/~knuto/kernel/4.14/admin-guide/kernel-parameters.html http://heim.ifi.uio.no/~knuto/kernel/4.14/admin-guide/kernel... Use full disk encryption - unlike Microsoft Bitlocker which left backdoors for LoJack, linux vulnerabilities are publicized and you can update as soon as the patch appears on the internet. Switch to a filesystem that the UEFI malware does not understand. Or move fields and magic numbers around in an existing filesystem to create a "custom" filesystem. Or a combination of all of the above.