Discover and read the best of Twitter Threads about #uefi
Most recents (2)
#ESETResearch discovered and reported to the manufacturer 3 vulnerabilities in the #UEFI firmware of several Lenovo Notebooks. The vulnerabilities allow disabling UEFI Secure Boot or restoring factory default Secure Boot databases (incl. dbx): all simply from an OS. @smolar_m 1/9
Reported vulnerabilities – #CVE-2022-3430, #CVE-2022-3431, and #CVE-2022-3432 – affect various Lenovo Yoga, IdeaPad and ThinkBook devices. All affected devices with an active development support have been fixed after we reported them to the manufacturer. 2/9
While disabling UEFI Secure Boot allows direct execution of unsigned UEFI apps, restoring factory default dbx enables the use of known vulnerable bootloaders (e.g., #CVE-2022-34301 found by @eclypsium) to bypass Secure Boot, while keeping it enabled.
eclypsium.com/2022/08/11/vul… 3/9
eclypsium.com/2022/08/11/vul… 3/9
For, err, no apparent reason, trying to customize a #Kubuntu (Bionic) Desktop #LiveCD in order to get it to work on an #Intel #NUC8i7HNK (just like that #Fedora Rawhide pendant which simply works OOTB) for a couple of days now suddenly reminded me of this:
For the record: I'm not (primarily) blaming the hardware here…
Once you find the required parameters for use with "mkisofs" (which are not mentioned in the document you likely refer to first, namely help.ubuntu.com/community/Live…), you're able to re-image an #Ubuntu/#Kubuntu daily #LiveCD with #UEFI support: askubuntu.com/a/504750
