d*2
发帖数: 2053 | 1 http://lifehacker.com/you-can-break-into-a-linux-system-by-pres
Patrick Allan
Yesterday 1:30pmFiled to: SECURITY
Hitting a key over and over again actually works for once. Two security
researchers in Spain recently uncovered a strange bug that will let you into
most Linux machines just by hitting the backspace key 28 times. Here’s how
to fix it and keep your data protected.
The researchers, Hector Marco and Ismael Ripoll from the Cybersecurity Group
at Polytechnic University of Valencia, found that it’s possible to bypass
all security of a locked-down Linux machine by exploiting a bug in the Grub2
bootloader. Essentially, hitting backspace 28 times when the machine asks
for your username accesses the “Grub rescue shell,” and once there, you
can access the computer’s data or install malware. Fortunately, Marco and
Ripoll have made an emergency patch to fix the Grub2 vulnerability. Ubuntu,
Red Hat, and Debian have all issued patches to fix it as well.
Linux is often thought of as a super secure operating system, but this is a
good reminder to take physical security just as seriously as network
security (if not more). Take extra care when your machine is around people
you don’t know, especially if your system has sensitive data on it. | a******1
发帖数: 1031 | 2 grub里好像可以直接创造新root account
只要hacker可以物理接触到linux机器，机器就可以被破解 | a9
发帖数: 21638 | 3 这是前几前本版某版友儿子报告的那个bug吗？
into
how
Group
bypass
Grub2
【在 d*2 的大作中提到】
: http://lifehacker.com/you-can-break-into-a-linux-system-by-pres
: Patrick Allan
: Yesterday 1:30pmFiled to: SECURITY
: Hitting a key over and over again actually works for once. Two security
: researchers in Spain recently uncovered a strange bug that will let you into
: most Linux machines just by hitting the backspace key 28 times. Here’s how
: to fix it and keep your data protected.
: The researchers, Hector Marco and Ismael Ripoll from the Cybersecurity Group
: at Polytechnic University of Valencia, found that it’s possible to bypass
: all security of a locked-down Linux machine by exploiting a bug in the Grub2
|
|
