3 ms·
The problem is rootkits booting even before your OS or antivirus can. That way they can run a hypervisor and boot the OS on it or load a malicious filysystem dr
by recoiledsnake 14y ago
The problem is rootkits booting even before your OS or antivirus can. That way they can run a hypervisor and boot the OS on it or load a malicious filysystem driver that returns a benign boot sector if it's requested and no application or antivirus running on that OS can even know that it's running on top of malware. Secure boot can stop this from happening.
Why is this so hard for everyone to understand?
- ajross 14y agoStop. I assure you I understand the issues, your patronization isn't appreciated. Malware can defeat an installed AV already, it certainly doesn't need a hypervisor to do it. Likewise it can (and just did, c.f. the news last week) install a malicious driver without pre-OS hooks. These are exploits that exist in valid, already-authenticated and running OS code. Secure boot can do nothing to stop it. So why is that so hard for you to understand?