3 ms·
remembered another one. They use the same code for VM and bare metal. Including the easy-login convenience hacks. So now anyone wanting physical access to your
by 1oooqooq 2y ago
remembered another one. They use the same code for VM and bare metal. Including the easy-login convenience hacks.
So now anyone wanting physical access to your host, just have to intercept plain-text communication with the BIOS (after secureboot did its thing), and reply with a new root password when the OS request bios key 11 or something. evil maids are living the dream.
- transpute 2y agoIs that with systemd logind? Why does logind interact with BIOS? https://vincent.bernat.ch/en/blog/2021-startx-systemd https://vincent.bernat.ch/en/blog/2021-startx-systemd
- 1oooqooq 2y agoit's before logind. it creates arbitrary files in the root filesystem and is intended to write to the user authorized keys. so it works later with sort of login or remote access