BlackLotus malware can bypass secure boot • Hacker News Board

Re: BlackLotus malware can bypass secure boot

#31

Post by Tangurena2 » Fri, Mar 03, 2023, 2:26 PM UTC

mistrial9 wrote: post #29

2OEH8eoCRo0 wrote: post #25

I'm glad we are locking down our machines and relinquishing control to Microsoft for singing so that we can still be owned.

they sell you the tools you need to work, each day. Just sign in!

In one of my grumpier moments, I complained that we were "just digital sharecroppers." Looking back, I'm also grateful for the Microsoft ecosystem that has given me about 25 years of employment as a developer.

Re: BlackLotus malware can bypass secure boot

#32

Post by hnthrowaway0315 » Sat, Mar 04, 2023, 6:05 PM UTC

M95D wrote: post #23

jhoelzel wrote: post #21

You mean the thousands of computers that have to be thrown away to use windows 11 are using it for profit and not security?? -shocked Pikachu face-

Not yet. You can still disable secure boot and install Linux. At some point in the future, it may become the same as phones. Locked bootloader/UEFI and only able to boot Windows.

Can you please elaborate what does it mean to be the same as phones? I guess you meant the sandbox env?

Re: BlackLotus malware can bypass secure boot

#33

Post by jhoelzel » Mon, Mar 06, 2023, 11:15 AM UTC

hnthrowaway0315 wrote: post #32

M95D wrote: post #23

Earlier quoted context omitted.

Not yet. You can still disable secure boot and install Linux. At some point in the future, it may become the same as phones. Locked bootloader/UEFI and only able to boot Windows.

Can you please elaborate what does it mean to be the same as phones? I guess you meant the sandbox env?

I think what he was saying is that, by locking down the bootloader, we could see devices that are locked to windows or apple forever. Just like iphones are

Re: BlackLotus malware can bypass secure boot

#34

Post by croes » Tue, Mar 07, 2023, 1:54 PM UTC

holdenc137 wrote: post #12

Perhaps we could ever so slightly dissuade malware actors by assigning less desirable names. E.g. instead of 'BlackLotus' => 'LameEffort-12'

Especially because Black Lotus Labs exist and researches malware.

https://www.lumen.com/en-us/security/black-lotus-labs.html