3 ms·
This is the "Evil maid attack" [1] but it is avoidable. If you have Secure Boot enabled and are properly signing your Bootloader + anything it launches then you
by KingMachiavelli 5y ago
This is the "Evil maid attack" [1] but it is avoidable. If you have Secure Boot enabled and are properly signing your Bootloader + anything it launches then your machine would just refuse to boot if anyone tampered with critical files in /boot.
The issue I have seen is that a LOT of BIOS (at least on desktop machines) seem to just let you reset the secure boot enforcement status via the BIOS reset jumper... which defeats the point although it does raise the physical access requirement to a longer duration.
- kadoban 5y agoEvil maid attack is really difficult anyway, because if nothing else they can just put in a hardware keylogger, or a hidden camera or a microphone if they really want to work for it, or etc.