**nixCraft 🐧** @nixCraft@mastodon.social · Jan 25, 2024, 19:02

**nixCraft 🐧** @nixCraft@mastodon.social · Jan 25, 2024, 19:02

nixCraft 🐧 @nixCraft@mastodon.social

Ugh. CVE-2023-40547 is a critical bug that exists in every #Linux boot loader signed in the past decade https://github.com/rhboot/shim/commit/0226b56513b2b8bd5fd281bce77c40c9bf07c66d

**⊥ᵒᵚ Cᵸᵎᶺᵋᶫ∸ᵒᵘ ☑️** @falken@social.cleverlibre.org · Jan 25, 2024, 19:23

**⊥ᵒᵚ Cᵸᵎᶺᵋᶫ∸ᵒᵘ ☑️** @falken@social.cleverlibre.org · Jan 25, 2024, 19:23

⊥ᵒᵚ Cᵸᵎᶺᵋᶫ∸ᵒᵘ ☑️ @falken@social.cleverlibre.org

@nixCraft the fuck is a fucking boot loader fucking with H fucking TTP for?

**tiaz (classic flavor)** @tiaz@clown.center · Jan 25, 2024, 20:59

**tiaz (classic flavor)** @tiaz@clown.center · Jan 25, 2024, 20:59

tiaz (classic flavor) @tiaz@clown.center

@falken @nixCraft @mjg59 I assure you, tftp is Worse

**⊥ᵒᵚ Cᵸᵎᶺᵋᶫ∸ᵒᵘ ☑️** @falken@social.cleverlibre.org · 2024-01-25T22:41:37Z

⊥ᵒᵚ Cᵸᵎᶺᵋᶫ∸ᵒᵘ ☑️ @falken@social.cleverlibre.org

@tiaz @nixCraft @mjg59 simpler, more likely to be error free?

**tiaz (classic flavor)** @tiaz@clown.center · Jan 25, 2024, 22:42

**tiaz (classic flavor)** @tiaz@clown.center · Jan 25, 2024, 22:42

tiaz (classic flavor) @tiaz@clown.center

@falken @nixCraft @mjg59 punishingly nonperformant (only one packet can be in flight at a time), no authentication, no encryption