#secure boot

[bytetrending]

Falhas no Secure Boot permitem invasão quase total e Microsoft corrige apenas uma

Duas falhas graves no Secure Boot, sistema de segurança presente na inicialização do Windows, colocaram milhões de computadores em risco. Essas vulnerabilidades permitem que atacantes ignorem as proteções do sistema, obtendo quase total controle do dispositivo. Em resposta, a Microsoft lançou uma correção para apenas uma dessas falhas. Secure Boot é um componente crucial no processo de…

[chloesimaginationthings]

Scott Cawthon’s version of FNAF Burntrap..

[teamsbw]

The dreaded Secure Boot - is it OK to turn it OFF

Windows 10 saw UEFI and Secure Boot becoming a common thing. However we now have an option to turn off this feature for those who want to upgrade to Windows 11 but do not have the compatible hardware. For some advance users, secure boot may be a good security feature. But for the average user whose files are now in the cloud, does this help or becomes a problem. Here is a typical scenario. Many…

[imclou]

selling authentic ldr eclipse autograph 100% legit trust me bro just DM me

LDR AU by @spadillelicious go read the fic please please pleasepleaseplease

|| Bonus LDR art ||

|| No text ||

[virtualizationhowto]

Proxmox 8.1 New Features and Download with Software-Defined Network and Secure Boot

Proxmox 8.1 New Features and Download with Software-Defined Network and Secure Boot #homelab #proxmox #proxmox81 #proxmoxnewversion #proxmoxupgrade #softwaredefinednetworking #opensourcehypervisor #secureboot #hypervisorsecurity #virtualizationhowto

The Proxmox 8.1 hypervisor has been released with great new features. The official information and documentation show it is a worthy upgrade for Proxmox 8 systems. Highlights include new software-defined network (SDN) features, secure boot, flexible notifications, and other new improvements. Let’s dive into this release.  Table of contentsSoftware-Defined Networking in Proxmox VE 8.1Enhancing…

[reviewgazette]

Just installed Linux Mint 21.2, except no one told me about UEFI secure boot. Trouble I had with that on Linux but I've found a solution of sorts, I don't know if the steps I took were necessary but it works for me.

sudo grub-install /dev/sda1

sudo grub-install /dev/sda1 --no-uefi-secure-boot

reboot

remember to keep the secure boot on for this to work.

[teaboot]

Oink oink fuckface

I’m genuinely curious what it is you think I do for a living

Like seriously, carte blanche. Anon is on and my inbox is open

Please tell me in detail what you think my job is and how I do it and how it contributes to the ongoing violent oppression of minorities in our collective descent into a militant fascist oligarchy

List my wages and weapons and body armour and how many compatriots stand at my side to defend my crimes

Or admit that you don’t actually know the difference between a private militia and a dude in a $15 plastic uniform

[toucheholland23]

FINALLY DREW EM PROPERLYYYYY YESS!!! And they got actual namess! Got out Superstar Eclipse aka. Boots, Moonshine aka. Shiny and Sunspark aka Sparks ✨✨✨✨

[swiggity-swexual-i-am-asexual]

As per usual, it’s DP crossover with (probably) DC, although you could probably adjust it for other fandoms

ANYWAYS

A little kid and his mother are trick or treating in another city, perhaps at some kind of event rather than knocking on doors, and the kid is dressed as Phantom. It’s very adorable, with his little ghost-shaped bucket and clearly homemade and already stained costume—listen, white only works if you can just fly over street grime or phase it out of your clothes—and his slightly I’ll fitting wig. The kid is SO happy to be out and about dressed as his favorite, and maybe even showed it off to Phantom back in Amity Park before his family left.

The hero, insert whoever you wish here, is probably in civvies and just enjoying the event. The kid, meanwhile, is so glad when people ask who he is so he can explain, and so- the hero gets to hear ALL ABOUT the local town hero who is probably pretty small time despite the kid’s clearly exaggerated stories. The hero certainly never heard of him, but the kid’s mom confirms that Phantom really was the town hero, despite some mixed reviews of the poor guy.

“Did you manage to show him your costume?” the hero asks.

“Yeah! We went down to the cemetery to leave flowers and I got to show him my costume.”

Wait. Cemetery? Maybe it was part of theme, because Phantom had to be named that for a reason, but… it sounded like…

The kid ignores the suddenly VERY still hero and instead turns to his mom. “Momma, do you think we should bring him candy? He doesn’t get to trick or treat like we do, and I can work super hard to get him a bunch!”

The kid’s mom just smiles. “We could, but maybe we should bring him something homemade. I bet he’d like something more filling, teen boys like him have a hollow leg.”

The kid wrinkles his nose. “Like Vernie with the pizza bagels?”

“Like your cousin, yes. We can make some cinnamon rolls and take them to his memorial, maybe bring some of the apples from your grandpa’s garden…”

The hero is pretty much forgotten as the two-part family wanders off, not quite intentionally forgetting the hero is there so much as the hero somewhat accidentally ended the conversation when they just froze and didn’t ask anything further.

Not that the hero didn’t want to. But they’d learn something very serious.

One—there was a small town hero they’d never heard of. Two—that hero was apparently a teen. Third—most pressingly, the teen hero was both beloved enough to have kids dressing up as him and dead enough to have a grave.

This… might require some phone calls.

[pixlokita]

Spent way too long on this :v but yeah anyway =w= time for coffee now.

Also a ref to the unused dialogue or whatever this is lol (ﾉ≧ڡ≦)

[maudiemoods]

Some simple expressions for funzies yay

I'm gonna find a way to draw them constantly even if it's the last thing I do

[szepkerekkocka]

What did Binarly discover?

The Binarly research team discovered that hundreds of products use a test Platform Key generated by American Megatrends International (AMI). This key was likely included in their reference implementation with the expectation that it would be replaced with another safely-generated key by downstream entities in the supply chain.

The test keys are shared with commercial partners and vendors with the expectation they be treated as completely untrusted.

By scanning an internal dataset of firmware images, we confirm that devices from unrelated vendors contain the same Platform Key, meaning that these keys must have been generated at the root of the firmware supply-chain.

These test keys have strong indications of being untrusted (for example, the certificate issuer contains the “DO NOT TRUST” or “DO NOT SHIP“ strings).

We discovered the private component of one Platform Key in a data leak where a suspected ODM employee published the source code containing the PK on a public GitHub repository. The private key was stored in an encrypted file, which was “protected” by a weak 4-character-long password and thus easily guessable with any password-cracking tool.

What’s the scope of the problem? To understand the actual scope of PKfail and its historical patterns, we scanned an internal dataset of UEFI firmware images using the Binarly Transparency Platform. This dataset is representative of the UEFI ecosystem and contains tens of thousands of images released in the last decade by all the major device vendors, including Lenovo, Dell, HP, HPE, Supermicro, Intel, MSI and Gigabyte. The macro results of this scan are quite alarming: more than 10% of firmware images in our dataset use an untrusted Platform Key and are thus vulnerable to PKfail. When only looking at firmware released in the past 4 years, the percentage reduces to 8%, though remaining at concerning levels. The first firmware vulnerable to PKfail was released back in May 2012, while the latest was released in June 2024. Overall, this makes this supply-chain issue one of the longest-lasting of its kind, spanning over 12 years. The list of affected devices, which at the moment contains almost 900 devices, can be found in our BRLY-2024-005 advisory. A closer look at the scan results revealed that our platform extracted and identified 22 unique untrusted keys.

via binarly blog

PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models

Source: https://www.securityweek.com/pkfail-vulnerability-allows-secure-boot-bypass-on-hundreds-of-computer-models/

More info:

https://www.binarly.io/blog/pkfail-untrusted-platform-keys-undermine-secure-boot-on-uefi-ecosystem

https://22222483.fs1.hubspotusercontent-na1.net/hubfs/22222483/Reports/PKfail%20-%20Binarly%20Research%20Report%20July%2025%202024.pdf

https://pk.fail/

[cookieruma29]

Two friends untied in grief

[amessleep]

guys gregory is innocent Ok. thanks

[dasketcherz]

the three amigos? more like the tres amores

[starliteonearth]

You know Ghoulcy has become a very serious threat when antis are literally forgetting that their ship IS the main cannon ship. Because what do you mean you'll cry if Vaultknight doesn't become real?? They ARE real. Did we somehow slip into an alternate reality where they aren't canon? Like please be so serious right now 😭😭