Multiple buffer overflows in shim allow for bypass of secure boot, potentially even done remotely: https://eclypsium.com/blog/the-real-shim-shady-how-cve-2023-40547-impacts-most-linux-systems/
If only there was a language that could compile for UEFI that can prevent runtime buffer overflows...
Like the one I wrote the Redox bootloader in?
Jeremy Soller 🦀 /
npub128…zteap
2024-02-07 23:08:49
Author Public Key
npub128a8l2essxd3dpdldadcc2vwjjqlsp5yx4pzcdcs7e4xea3nna8q3zteapPublished at
2024-02-07 23:08:49Event JSON
{
"id": "cc091205f7b91bff4f4c94a6c196b8246aa4afe44f936d4c8c71ee9ae170d6f9",
"pubkey": "51fa7fab30819b1685bf6f5b8c298e9481f8068435422c3710f66a6cf6339f4e",
"created_at": 1707347329,
"kind": 1,
"tags": [
[
"proxy",
"https://fosstodon.org/users/soller/statuses/111892714614866026",
"activitypub"
]
],
"content": "Multiple buffer overflows in shim allow for bypass of secure boot, potentially even done remotely: https://eclypsium.com/blog/the-real-shim-shady-how-cve-2023-40547-impacts-most-linux-systems/\n\nIf only there was a language that could compile for UEFI that can prevent runtime buffer overflows...\n\nLike the one I wrote the Redox bootloader in?",
"sig": "6aca95c0d18ce13abb6725716d7b577bf4d8b140228a5589ed1a3c39d58c6a6a65b731f41e7a5a90c6844044e7b944714e973daf74585eb44829a88235e6f8c6"
}