3 ms·
I think this doesn't care about secure boot? As it works on the unauthenticated data, rather than the bootloader + kernel which in a properly configured secure
by Macha 5y ago
I think this doesn't care about secure boot? As it works on the unauthenticated data, rather than the bootloader + kernel which in a properly configured secure boot system will not boot if modified.
- gruez 5y agosecureboot can be trivially disabled in firmware.
- rosndo 5y agoBut your computer will complain loudly because it’s 2022 and you use tpm2-totp because that’s the normal thing to do.
- mnw21cam 5y agoYou need to be able to modify the contents of the disc, which implies that either you have managed to boot your own OS or you have been able to temporarily plug the storage into something else. This is as you say a much lower bar to clear than modifying the OS of the device as in a classical evil maid. Effectively, the maid is already built in to the OS in the form of the bug.