• Lembot_0004@discuss.onlineBanned
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    16 hours ago

    It is already late if your boot sector is writable by anyone who wants to. Moreover, the boot sector isn’t writable if you get access just to the FS.

    • the_crotch@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      16 hours ago

      If I managed to get root, either by compromising account credentials or using some sort of escalation exploit, I could write whatever I wanted to the boot sector. Secure boot will prevent that modified boot sector from booting.

      “More security is a bad thing” is a weird take