Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.ie is one of the many independent Mastodon servers you can use to participate in the fediverse.
Irish Mastodon - run from Ireland, we welcome all who respect the community rules and members.

Administered by:

Server stats:

1.5K
active users

mastodon.ie: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.3

#bootkitty

0 posts0 participants0 posts today
Kristian Purrucker

Sehr interessanter Podcast zu Bootkitty!

Er fast die Geschehnisse um die Entdeckung des ersten UEFI-Boot-Kits für Linux sehr gut und anschaulich zusammen. Habe viel durch den Podcast gelernt.

Vielen Dank an @syt und @christopherkunz für diese tolle Folge von Passwort.

#linux #security #bootkit #bootkitty

passwort.podigee.io/23-bootkit

Passwort - der Podcast von heise securityBootkitty - Schnitzeljagd um ein Linux-BootkitEin neues Linux-Rootkit taucht plötzlich auf und wird gleich dreimal analysiert. Seine Besonderheit: Es kann über das UEFI Linuxsysteme infizieren - bis jetzt ging das nur unter Windows. Aber wer steckt dahinter und warum haben die Unbekannten das Bootkit gebastelt? Sylvester und Christopher gehen auf Spurensuche. Dieses Mal litten Christopher und Sylvester unter ausgeprägtem Hallo-Effekt, was zwischendurch zu unfreiwillig komischen Reinrede-Aktionen führte. - [Ken Thompson: Reflections on Trusting Trust](https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf) - [BlackHat-Präsentation zu LogoFAIL](https://i.blackhat.com/EU-23/Presentations/EU-23-Pagani-LogoFAIL-Security-Implications-of-Image_REV2.pdf?\_gl=1*18vnefe*\_gcl_au*MTM5NTEwMjYzLjE3MzM4OTc5OTc.*\_ga*MTY4Njg2MTc1MC4xNzMzODk3OTk3*\_ga_K4JK67TFYV*MTczMzg5Nzk5Ny4xLjEuMTczMzg5ODAxNy4wLjAuMA..&\_ga=2.47355111.1773935767.1733897998-1686861750.1733897997) - [ESET-Analyse](https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/) - [Humzak711' Analyse](https://humzak711.github.io/analyzing_IranuKit.html) - [Binarly-Analyse](https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux)
Pyrzout :vm:

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered – Source: www.securityweek.com ciso2ciso.com/prototype-uefi-b #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #vulnerabilities #securityweekcom #securityweek #SouthKorea #Bootkitty #FEATURED #Binarly #Bootkit #eset #UEFI

CISO2CISO.COM & CYBER SECURITY GROUP · Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered – Source: www.securityweek.comSource: www.securityweek.com - Author: Ryan Naraine The discovery of a prototype UEFI bootkit targeting specific Ubuntu Linux setups has deepened with re
Fossery Tech :debian: :gnome:

This week's Linux and FOSS news:

LINUX NEWS

elementary OS 8 released with new Wayland session (called Secure session) with prompts to give programs certain permissions, new Dock, Flathub out-of-the-box, new quick settings, system updates via system settings, option to conceal text on screenshots:
news.itsfoss.com/elementary-os
(The prompting for permission thing is pretty unique on Linux. I know some nerds will call it "phone approach" because mobile OSes do the same but I don't think it's necessarily bad. I'm personally satisfied with the regular approach to open Flatseal to control permissions after I download a program, but for many people the prompting approach is probably more efficient because they don't have to think about going to Flatseal first, yet they can still prevent some unnecessary access for programs.)

NixOS 24.11 released with GNOME 47, KDE Plasma 6.2, PipeWire by default, Nix 2.24 package manager, improved support for Darwin into Nixpkgs, support for LLVM 19 compiler etc.:
9to5linux.com/nixos-24-11-rele

Armbian 24.11 released with support for OrangePi5 Max, Radxa ROCK 5B+ and many more devices:
9to5linux.com/armbian-24-11-re

First UEFI bootkit for Linux, Bootkitty is discovered:
news.itsfoss.com/bootkitty-lin
(Remember, no system is 100% secure, including Linux)
(It's currently a proof-of-concept but regardless it's better to be aware of it, update your system regularly, keep Secure Boot enabled if your distro supports it, to be protected against these type of attacks in the future.)

Cinnamon 6.4 released with new default theme, built-in Night Light feature, Power Profile options, updated applets etc.:
9to5linux.com/cinnamon-6-4-des

KDE Plasma 6.2.4 released with re-enabled HDR mode for NVIDIA 565 and Linux 6.11 users, various bug fixes, improvements:
9to5linux.com/kde-plasma-6-2-4

Ubuntu Touch OTA-7 released with PulseAudio security fixes:
9to5linux.com/ubuntu-touch-ota

(FOSS news in reply)

It's FOSS News · elementary OS 8 is Finally Here for its Hardcore Fanselementary OS 8 is a modest upgrade with nifty features. Would you like it? Take a look at what it offers.
#WeeklyNews#FOSS#OpenSource
TrendingLive feeds
About