Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass

binarly.io

Post reply on HN
Print view View original

141–142 of 142 posts

Re: Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass

#141

Post by fsflover »

JCattheATM wrote: post #140
fsflover wrote: post #139

Earlier quoted context omitted.

Yes, except the root of trust in my link is FLOSS.

So it is too with a FOSS secure boot implementation like verified boot. Round and round we go.... Your setup is less secure. Period.

> Your setup is less secure. Period.

Tommy, is that you? https://forum.qubes-os.org/t/discussion-on-purism/2627/146

Re: Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass

#142

Post by JCattheATM »

fsflover wrote: post #141
JCattheATM wrote: post #140

Earlier quoted context omitted.

So it is too with a FOSS secure boot implementation like verified boot. Round and round we go.... Your setup is less secure. Period.

> Your setup is less secure. Period. Tommy, is that you? https://forum.qubes-os.org/t/discussion-on-purism/2627/146

When you can figure out how to setup a foss secure boot implementation with verified boot, then maybe I'll consider your input on bootloader security worth considering.

Until then, I don't think it makes sense to continue this discussion. I assume you'll claim it isn't possible, but anyone who expends the slightest effort will see how far from reality that is.

Have a great day.

Post reply on HN