4 ms·
What systems are those? Windows doesn’t allow you to do that by default unless you’re an admin.
by hgazx 4y ago
What systems are those? Windows doesn’t allow you to do that by default unless you’re an admin.
- Arnavion 4y agoAny systemd-using Linux distro will also automount /efi as writable only by root (assuming the mount was generated by GPT auto generator, not by a specific fstab entry), so it's not that either.
- tinus_hn 4y agoNormal home users are administrators, they have to go through the pop-up to run things with escalated privileges but that, according to Microsoft, is not a security boundary.
- Arnavion 4y agoIf we're considering Administrator / root access as trivially available, then any exploit becomes trivial itself. Even on a BIOS machine root can overwrite the MBR / kernel / initramfs to contain an exploit.
- tinus_hn 4y agoSorry, the argument is: > Windows doesn’t allow you to do that by default unless you’re an admin. The refutation is that by default users are an admin. So no, they’re not protected against persistent threats like UEFI malware.
- Arnavion 4y agoYes, and thus I made the comment that I made.