The_Decryptor

There’s probably flaws that would allow executing attacker supplied code, but it’s not like BIOSs had any notion of security (i.e. secure boot) to begin with, so you could just straight up have the system boot into your own image anyway.

Nah, PXE predates UEFI by like 20 years, it’s been a pretty normal feature since the late 80s.

Depends on how you handle the OOM error though, aborting the process is fine while “try to recover and continue” is the problem.

Well, they’re called “zero days” for a reason.

As nice as DANE is, it just shifts the burden of trust to your DNS provider. Like if you hop on Wi-Fi at a coffee shop, said network can simply MITM connections and supply their own certs via re-writing the DNS.

You can encrypt DNS to prevent that, but now you need a way to ensure your DNS client already trusts the desired DNS server, etc.

As much as people dislike CAs, they’re a proven solution to a problem that’s already implemented in nearly every device on the planet.

deleted by creator

Pope Leo has a bachelors of science in mathematics, they’ll never be able to convince him that matrix multiplication is alive.