[dead]
What is an SBAT and why does everyone suddenly care
271–276 of 276 posts
Re: What is an SBAT and why does everyone suddenly care
#272Isn't secure boot the first thing you disable when you install linux?
This has been my stance for years, but I am open to be persuaded why this is a terrible practice that will lead to kitten murder. I saw someone else give a similar reasoning that if there were a booting error, they would never assume it was a rootkit, but some breakage between all of the booting cruft. I certainly lack any expertise to understand what happens during boot to be able to diagnose problems.
[deleted]
Re: What is an SBAT and why does everyone suddenly care
#273Easy answer: say no to Microsoft and TPMs. You can buy a computer with Linux installed, today! Ubuntu is easy, so is kubuntu. You can do anything on Linux that you can do on windows and most of the time it's child's play. The past is the past, give up on windows.
[deleted]
Re: What is an SBAT and why does everyone suddenly care
#274Earlier quoted context omitted.
If security vendors followed this logic then all an attacker would have to do is look up the error and render the security moot. By leaving the reason vague an attacker has no immediate feedback and no clue how to remedy. I vastly prefer the way this works now.
Attackers are smarter than you give them credit for
I believe humans are vastly more stupid than you give them credit for.
It's the HN effect. The pool of geniuses here suggests to the reader that the pool of intelligence outside of this microcosm is similar. It's not.
Criminals are overwhelmingly stupid. It's why LEO catches so many of them. Smart people don't tend to do crime, they tend to sell their skills to more legitimate enterprises.
Re: What is an SBAT and why does everyone suddenly care
#275Earlier quoted context omitted.
Attackers are smarter than you give them credit for
I believe humans are vastly more stupid than you give them credit for. It's the HN effect. The pool of geniuses here suggests to the reader that the pool of intelligence outside of this microcosm is similar. It's not. Criminals are overwhelmingly stupid. It's why LEO catches so many of them. Smart people don't tend to do crime, they tend to sell their skills to more legitimate enterprises.
You are vastly overestimating the intelligence of the people on this site.
Re: What is an SBAT and why does everyone suddenly care
#276Isn't secure boot the first thing you disable when you install linux?
This has been my stance for years, but I am open to be persuaded why this is a terrible practice that will lead to kitten murder. I saw someone else give a similar reasoning that if there were a booting error, they would never assume it was a rootkit, but some breakage between all of the booting cruft. I certainly lack any expertise to understand what happens during boot to be able to diagnose problems.
I have a concern that if I find malware or suspicious activity on a system, when I report it through Virus Total or another channel I won't be believed if secure boot is disabled and that appears in the logs. Or if another threat actor got in during the brief period it was disabled and invalidated the audit trail.
"We won't accept any reports because your secure boot chain is too short." To put it bluntly and crudely. Not to dismiss a very real and important real-life issue.
I've lost people I love in my life over similar things. I don't want to be in a similar situation in other Walks or Paths of life.
It's a powerful incentive mechanism. Even if you're believed in the end how long did it take? How old? And now that difficult thing becomes a talking point when you just wanted to build.