• 0 Posts
  • 16 Comments
Joined 11 months ago
cake
Cake day: March 25th, 2024

help-circle




  • f4f4f4f4f4f4f4f4@sopuli.xyztolinuxmemes@lemmy.worldExe in a bottle
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    8 hours ago

    grub’s always been a hack. The first stage in 512 byte boot sector chainloads the second stage in the space between boot sector and the first sectors of first partition. Second stage chainloads the kernel. (This is my primitive gist.)

    grub was never made for security, it just exists in a place where one would think security would be priority… but again, physical access = pwned, etc.

    Not quite the same, but funny: I recently unlocked an HDD from a car head unit to prove to a friend that it was only storing music ripped from its CD drive (and the associated minimal CD title database)… Toshiba master HDD password is 32 spaces. 😅




  • Even if you understand the commands, you need to trust the website because a malicious site can use JavaScript to copy something completely different into your clipboard, with a newline character at the end to automatically execute when pasted. (Is the newline exploit fixed in all shells? It used to fail in zsh but work in many others…)

    One can also paste into a text editor to verify before pasting into terminal, but what noob is going to know or bother to?