fubarx@lemmy.world to Technology@lemmy.worldEnglish · 15 days agoCode-execution flaw in UEFI firmware affects most servers on planet Eartharstechnica.comexternal-linkmessage-square103linkfedilinkarrow-up1455arrow-down18file-text
arrow-up1447arrow-down1external-linkCode-execution flaw in UEFI firmware affects most servers on planet Eartharstechnica.comfubarx@lemmy.world to Technology@lemmy.worldEnglish · 15 days agomessage-square103linkfedilinkfile-text
minus-square0x0@infosec.publinkfedilinkEnglisharrow-up3arrow-down2·14 days agoSounds like luks is borked as well if youre using only tpm state to unlock, which you shouldnt
minus-squareKairos@lemmy.todaylinkfedilinkEnglisharrow-up1arrow-down1·13 days agoAll of the LUKS integrations literally just store a password and then type that into the thing upon boot
minus-squaremichaelmrose@lemmy.worldlinkfedilinkEnglisharrow-up1·2 days agoNOTHING works this way it would be horribly insecure and it absolutely doesn’t work that way.
minus-squareKairos@lemmy.todaylinkfedilinkEnglisharrow-up1·2 days agoNo it’s about how it works. There’s lots of vulns because of it.
minus-squaremichaelmrose@lemmy.worldlinkfedilinkEnglisharrow-up1·2 days agoNo. Your actually encryption key is a random number not a password. Your password is used to decrypt your actually key which is loaded into memory and used to read encrypted data. In no configuration is it just stored in clear text.
Sounds like luks is borked as well if youre using only tpm state to unlock, which you shouldnt
All of the LUKS integrations literally just store a password and then type that into the thing upon boot
NOTHING works this way it would be horribly insecure and it absolutely doesn’t work that way.
No it’s about how it works. There’s lots of vulns because of it.
No. Your actually encryption key is a random number not a password. Your password is used to decrypt your actually key which is loaded into memory and used to read encrypted data.
In no configuration is it just stored in clear text.