Tootfinder

heise | Auswirkungen der neuen Secure-Boot-Zertifikate für Linux
Nach 15 Jahren sind die Secure-Boot-Zertifikate abgelaufen, mit denen auch Linux-Bootloader signiert sind. Wir erklären, welche Auswirkungen das auf Linux hat.

Auswirkungen der neuen Secure-Boot-Zertifikate für Linux
Nach 15 Jahren sind die Secure-Boot-Zertifikate abgelaufen, mit denen auch Linux-Bootloader signiert sind. Wir erklären, welche Auswirkungen das auf Linux hat.

Here is a list of hashes to remind you that you should really better be in full control of your #firmware and boot chain:
https://www.welivesecurity.com/en/eset-res

Forgotten UEFI shims undermining Secure Boot
ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities.

I would like some rough number.
How many devices are affected by #UEFI Secure #Boot issues due to missing cert upgrades?
2%? 20%? 30%?

Microsoft confirms Secure Boot update failing on some Windows 11 PCs, blocks update due to known issues
Microsoft has confirmed that Secure Boot certificate updates are failing or being blocked on some Windows 11 PCs.

NomadBSD based on FreeBSD 15.1-RELEASE from @… - Off-Topic - NomadBSD Forum
https://forum.nomadbsd.org/t/noma…

NomadBSD based on FreeBSD 15.1-RELEASE from @pfriedma@pfedi.pfriedma.org
From https://mastodon.bsd.cafe/@pfriedma@pfedi.pfriedma.org/116943113470215738: … I built a version based on 15.1-release. https://pfriedma.org/NomadBSD-15.1-pfriedma.img.gz (edited to gz to save some bandwidth) It’s x64 only, doesn’t support secure boot, and is the UFS version. (I’m working on the ZFS version now to see if it’s any more performant) but it works and lets you try out things.

After giving up on Haiku on my weird old SW312 Apollo Lake tablet, I decided to give CachyOS a shot because it came pre-installed on my BC-250 box. The tablet has been a nightmare due to its 64 bit cpu and 32 bit UEFI secure boot, but while CachyOS was installing, it gave me a heads-up that my UEFI was probably buggy and I might have to adjust something later. After a reboot, everything *just worked*. What kind of trickery is this? I practically had to perform voodoo rituals to update the …

My final post-install stage is done. Now back to coding.

I can't stop saying the NVRAM vars are a tough #UEFI attack surface, and if processed wrong, may undermine all #security:
https://kb.cert.org/vuls…

ASUS published a video on disabling and enabling "Secure" Boot just a few days ago:
https://youtu.be/5Mp26KORRjg
One may wonder why just about now (kekw) and why one would want to turn off somethig marketed as a security feature.
Questions over questions.

Ah yes, can’t boot from USB on a T2 Mac with external booting disabled, but you can boot into Recovery, just plug the USB stick in and it’s auto-mounted and you can use Terminal to launch stuff from the USB stick
Such secure