Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Lawrence D'Oliveiro <ldo@nz.invalid>
Newsgroups: comp.os.linux.misc
Subject: Re: F2FS On USB Sticks?
Date: Thu, 27 Mar 2025 06:17:08 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 18
Message-ID: <vs2qh4$3jchh$4@dont-email.me>
References: <vrikv7$icpd$1@dont-email.me> <sm0v7s2spt5.fsf@lakka.kapsi.fi>
	<lYednSXFeZiM00D6nZ2dnZfqnPudnZ2d@giganews.com>
	<g520blxb3v.ln2@Telcontar.valinor> <vrkdlc$257qv$3@dont-email.me>
	<m46f8sFcqfqU2@mid.individual.net>
	<-02dnTLnIvSN6kP6nZ2dnZfqn_EAAAAA@giganews.com>
	<vrmeiq$1sbl$4@dont-email.me> <fut2blx5lk.ln2@Telcontar.valinor>
	<m48bn9Fme0qU2@mid.individual.net> <vrmtvf$3f2ff$1@news1.tnib.de>
	<sm0bjtssq99.fsf@lakka.kapsi.fi> <vrod60$3iipn$1@news1.tnib.de>
	<djg5blxm15.ln2@Telcontar.valinor>
	<op.23vdbuaoa3w0dxdave@hodgins.homeip.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 27 Mar 2025 07:17:08 +0100 (CET)
Injection-Info: dont-email.me; posting-host="5e3725a960a956e95c3230978fe8baf9";
	logging-data="3781169"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX18zZ40T/22v7oqzdkKuV9sL"
User-Agent: Pan/0.162 (Pokrosvk)
Cancel-Lock: sha1:SiOIj844G2UI4ZM7LOSlqFfwCjc=
Bytes: 2312

On Sun, 23 Mar 2025 11:58:32 -0400, David W. Hodgins wrote:

> uefi is a mini operating system developed primarily for the purpose of
> making it harder for other operating systems to be used, and to boost pc
> sales.  The attack surface it exposes allows undetectable root kits to
> be installed, or machines to be easily bricked just by deleting the
> efivars from the nvram.

Harsh ... but fair ...

> uefi is marketed as improving security. While it may block amateur
> attackers, it is a security nightmare.

To me, the big security nightmare seems to be “Secure Boot”, which so
far has been anything but. It was supposed to be possible to revoke
security keys for compromised bootloaders/OSes, but this turned out to
be impossible in practice
<https://www.zdnet.com/article/microsoft-pulls-security-update-after-reports-of-issues-affecting-some-pcs/>.