This is a secondary account that sees the most usage. My first account is listed below. The main will have a list of all the accounts that I use.

henfredemars@lemmy.world

Personal website:

https://henfred.me/

  • 10 Posts
  • 241 Comments
Joined 1 year ago
cake
Cake day: July 4th, 2023

help-circle







  • It is highly unlikely that you have malware sophisticated enough to do something like compromise installation media (already exceedingly rare) yet not sophisticated enough to bypass secure boot.

    The purpose of secure boot is to verify that the boot loader and kernel are approved by the manufacturer (or friends of such). There are certainly ways to inject software into a system that doesn’t reside in those locations. It just makes boot sector viruses and kernel mode rootkits slightly more technically challenging to write when you can’t simply modify those parts of the operating system directly. If malware gets root on your installation it’s game over whether or not you have secure boot enabled. Much of the software on a computer is none of those things protected by secure boot.

    Plus, take another wager: most systems today ship with secure boot enabled. If you were a malware author, would you still be writing malware that needs secure boot turned off to run? Of course not! You would focus on the most common system you can to maximize impact. Thus, boot sector viruses are mostly lost to time. Malware authors moved on.

    Overall, it’s a pretty inconsequential feature born of good intentions but practically speaking malware still exists in spite of it. It’s unlikely to matter to any malware you would find in the wild today. Secure boot keys get leaked. You can still get malware in your applications. Some malware even brings its own vulnerable drivers to punch into the kernel anyway and laugh in the face of your secure boot mitigation. The only thing secure boot can actually do when it works is to ensure that on the disk the boot loader and kernel look legit. I guess it kind of helps in theory.






  • I appreciate the positive and constructive outlook and for that I value your contribution. Your wife seems like she’s being the change we want to see in less-than-stellar HR departments, but I think to consider the benefits of HR from the employee POV just isn’t safe unless you’re absolutely certain where the priorities lie for your local HR team.

    The phrase “cops of the company” is an even more accurate term in the sense that while some cops may actually believe in serving their community, many perhaps most do not, and trusting one is hazardous to your health. A good HR department does care about employees and the company, but how does an employee know that they have one of the good ones? I feel like this is something you don’t really know until you lean upon it such as when disagreements occur, and then either the rickety post will hold or you fall flat on your face. Me? I’m not leaning on that rickey post any more than I would willingly speak to a “friendly” neighborhood police officer. Your job isn’t a place for trust. It’s business. That HR person could be your wife, or they could be the kind to shoot first and ask questions later.

    I don’t have a problem with my local PD nor do I have any issues with my HR, but I definitely don’t want a visit from either.








  • henfredemars@infosec.pubtoPeople Twitter@sh.itjust.worksThe wonders of the human body
    link
    fedilink
    English
    arrow-up
    112
    arrow-down
    1
    ·
    edit-2
    17 days ago

    One is a requirement to be an organism. The other is a nice to have. A great many creatures simply die after reproducing, for example, which we can interpret to mean the minimum requirement has been met and anything beyond that isn’t as important, if we like to view it that way.

    Forming that small person is also a bit of a chaotic and messy process involving chance errors of various kinds and variations in the way parts grew. In a sense, the person formed would never be exactly the same if you tried again with the same inputs either.

    That this system works as well as it does is a miracle.

    EDIT: Missing words.