overview for admin

PKfail Secure Boot bypass lets attackers install UEFI malware in c/cybersecurity

[–] admin 4 points 6 months ago (2 children)

Yeah, unfortunately the default state is always to allow enrollment of keys. Think about the thousands of enterprise devices which just got a BIOS password from the IT Dept. And the only change they made to the BIOS was the PXE Boot as a first option. As long as they never disable booting from the USB devices, it will enroll the keys. HP even allows you to get to the Boot Menu and sort of a pre-BIOS menu in the newer devices still with a BIOS password and lock set up. And I have first hand witnessed way too many to count instances where that is the case.

No matter what vendor, HP, Dell or Lenovo (the 3 main ones used in the enterprise world) allow the enrollment of keys by default, with a locked BIOS by default.

Source: I'm the sysAdmin at a R2 recycler and regularly get thousands of laptops to play with.

PKfail Secure Boot bypass lets attackers install UEFI malware in c/cybersecurity

[–] admin 1 points 6 months ago (4 children)

What's the point? If even in BIOS locked systems, any user can enroll their own keys and boot off any drive lol

For example: see ventoy documentation.

😂 Elon Musk just crawled from under a rock and discovered something that has been bothering people for years. It is just too funny not to share this one. in c/[email protected]

[–] admin 1 points 11 months ago (1 children)

You can always chroot into a filesystem.

Joe Rogan and Bret Weinstein Promote AIDS Denialism to an Audience of Millions in c/[email protected]

[–] admin 2 points 11 months ago

Appreciated the link.

Joe Rogan and Bret Weinstein Promote AIDS Denialism to an Audience of Millions in c/[email protected]

[–] admin 1 points 11 months ago (2 children)

Any suggestions where I won’t have to swallow shit for minutes before I realize what a dickhead he is? I’m not really interested in his topics or guests, so any suggestions will help a lot.

Joe Rogan and Bret Weinstein Promote AIDS Denialism to an Audience of Millions in c/[email protected]

Rule for Beginners in c/[email protected]

[–] admin 2 points 11 months ago (3 children)

Imagine my mixed emotions when I’ve been doing ‘ls -la’ since I remember and watch someone do ‘ls -al’.

Sony misses PS5 sales target as console enters ‘latter stage of its life cycle’ in c/[email protected]

[–] admin 3 points 11 months ago

The wii games look amazing too! I don’t remember Super Mario Galaxy looking that good.

[Haiku] Summertime vibes in c/[email protected]

[–] admin 2 points 11 months ago

If ssh works then the average Linux SysAdmin is covered too!

Asahi Linux project’s OpenGL support on Apple Silicon officially surpasses Apple’s in c/[email protected]

[–] admin 6 points 11 months ago

I had them working great in my Thinkpad X270, even you could authenticate or use it in the terminal with sudo. I miss my X270 man :/

What PC is like the "thinkpad" of PCs? in c/[email protected]

[–] admin 1 points 11 months ago (1 children)

Dell enterprise series of desktops (Optiplex and Precision) are upgradeable with off the shelf parts. The CPU, RAM, SSD, GPU, Network cards, etc. The same way a regular motherboard from any manufacturer does.

For example an Intel Core 8th gen system would POST with any 8th Gen CPU, any type of DDR4 ram and would boot from any disk. You cannot upgrade an 8th gen to a 12th or 14th gen from any brand, the only proprietary properties of these systems are the case or motherboard form factor and the power connectors.

Filesystem mounting ro with heavy NVMe I/O in c/[email protected]

[–] admin 1 points 11 months ago

Do you have a spare set up where you can boot up from that same SSD? Literally any laptop would work plug and play and that would rule out the possibility of it being the motherboard on the OP.