mjg59

40 ms·

601.
by mjg59 4y ago
That's related to Secure Boot, not the TPM
602.
by mjg59 4y ago
Oh, I think the vulnerable Windows images should also be revoked, but pretending that the damage caused is equivalent isn't realistic. Systems have shipped with factory restore partitions that still contain old bootloaders - this revoc
603.
by mjg59 4y ago
That information is still in PCR 4, the reason for just encoding the policy and signing key in PCR 7 is that it remains stable even if you update the bootloader.
604.
by mjg59 4y ago
As noted in the other comment, Linux (if running fwupd) and Windows support doing it automatically, but the files are made public so other operating systems and distributions can also implement that.
605.
by mjg59 4y ago
No, revocation lists can be updated from the OS and are freely available from https://uefi.org/revocationlistfile
606.
by mjg59 4y ago
This is kind of weird in that it's exploiting a vulnerability in the Windows bootloader, but once exploited it's pivoting to using shim+grub (edit: apparently it's not actually grub, it's their own bootloader that's
607.
by mjg59 4y ago
TPMs are used for Measured Boot, not Secure Boot (although the Secure Boot configuration is one of the things that's measured). Secure Boot exists on platforms that don't have TPMs.
608.
by mjg59 4y ago
Anyone who believes that XFree86 was stable in 1999 was apparently running a different XFree86 to me. The sysrq key was mostly useful at the time for using the SAK shortcut to kill all processes on the current terminal, which with luck incl
609.
by mjg59 4y ago
Most antibiotics are either compounds produced as defensive mechanisms by various organisms, or are synthetic derivatives of the same. That's given bacteria a huge quantity of time to evolve resistance mechanisms, and the scale of hori
610.
by mjg59 4y ago
The conflation between "Zero Trust" and "Zero Trust implemented with third-party infrastructure" is unfortunate - I think it's reasonable to feel uncomfortable with a third party being in a hyper-privileged position
611.
by mjg59 4y ago
Describing "Zero Trust" as a misnomer when it's a reference to placing no inherent trust in the client seems misleading. Yes, you have to place trust in whatever makes the trust decision, whether that's you or a third pa
612.
by mjg59 4y ago
Firmware will typically configure the SPI controller such that flash can't be written directly from the OS, both as a self-protection mechanism (there's been malware in the past that deliberately bricked boards by overwriting the
613.
by mjg59 4y ago
There's two different components here. The first is the Management Engine. Unless this laptop is extremely old, it has one, and it's running. Depending on age, you may be able to prevent it from booting while still allowing the re
614.
by mjg59 4y ago
Eh you also need to call iopl() which is a privileged operation, it's not just about file permissions
615.
by mjg59 4y ago
Fi is an MVNO - there's apparently some sort of magical mapping between Fi numbers and network-specific numbers that still end up on the network's infrastructure (there apparently used to be issues with 911 operators seeing the ne
616.
by mjg59 4y ago
Brand new aircraft still include fixtures to stub out cigarettes in the bathrooms, because it doesn't matter if you declare that something's forbidden, people will do it anyway and you need to do what you can to minimise harm.
617.
by mjg59 4y ago
I feel like I'm missing something here, but: the references are two support forum threads and a reddit thread, both of which link back to the referenced twitter thread? Is there any actual confirmation that this RCE exists? What does &
618.
by mjg59 4y ago
From the article: "Savvy attackers may start looking for patterns in the bank identification numbers (BINs) that we issue, and proactively deleting or excluding them from their dumps. For this reason we are in discussions with a number
619.
by mjg59 4y ago
If the VPS provider doesn't need to be trustworthy, why does Tailscale?
620.
by mjg59 4y ago
Correct.
621.
by mjg59 4y ago
Why do you think the sort of provider that offers $5 VPSes is more trustworthy than Tailscale?
622.
by mjg59 4y ago
Well, shim also measures whatever certs it uses, so it's not a complete loss.
623.
by mjg59 4y ago
> There isn’t a standard PCR with some standard value indicating that a certain image was booted. No, but there is a standard PCR with a standard value indicating that a certain certificate was used to sign what was booted, and Windows i
624.
by mjg59 4y ago
PCR 7 doesn't just indicate whether secure boot was enabled, it also contains information about which certificates were used to boot. Obviously if you'll happily sign something unsigned the unsigned thing can just fake a measureme
625.
by mjg59 4y ago
You can't easily tell because it's out of stock, but other Petmoto branded items on walmart.com are actually being sold by non-Walmart sellers. There's no indication that Walmart are involved other than being a shopfront.
626.
by mjg59 4y ago
The controller communicated directly with Stadia, avoiding the latency of having to push it through your machine's input stack and only then sending it to the servers.
627.
by mjg59 4y ago
Given the density of the US rail network it's rather more than "last mile", but yes - rail depots are not where you actually want the goods to be in most cases, and you need to do something about that. The question is more wh
628.
by mjg59 4y ago
I wrote about some of this in 2011 ( https://mjg59.livejournal.com/137313.html ), but even in 2003 this wasn't great advice - attempting to reboot a system like this would probably work most of the time, but it certainly
629.
by mjg59 4y ago
The latter.
630.
by mjg59 4y ago
Thanks! I've updated to point at your post, since it's much more detailed.

More ›