Former biologist. Actual PhD in genetics. Security at aurora.tech, OS security teaching at ischool.berkeley.edu. Blog: mjg59.dreamwidth.org. He/him.
https://www.ischool.berkeley.edu
Joined: 2022-11-07
Signal: @mjg.59
ββββ
2024-11-29 mjg59 β 1π€ β RE: ?
@Suiseiseki it also targets non-proprietary UEFI and is entirely mitigated if you run some non-UEFI proprietary firmware
ββββ
2024-11-28 mjg59 β RE: gilgwath
@gilgwath I'm not aware of any valid copies of shim that participate in a boot chain that allows unsigned kernel code without owner intervention
2024-11-28 mjg59 β 3π¬ β RE: mjg59
Given it PRINTS A FUCKING MESSAGE EVERY TIME IT RUNS it's pretty clearly not intended as real malware but I'd be somewhat astonished if there are no real world examples out there
The existence of a proof-of-concept Linux-targeting UEFI bootkit that's immediately blocked by secure boot being enabled being interpreted as evidence that secure boot is a waste of time is, [β¦]
2024-11-28 mjg59 β 3π¬ β RE: mjg59
Oh of *course* he's a "biological gender is under attack" person
Realising that I'll be in London at the time of Craig Wright's contempt hearing and this is far too tempting
ββββ
2024-11-26 mjg59 β RE: mjg59
Me, on a date: Ok so when Linus said I was deepthroating Microsoft he had no personal experience in my prowess in that respect
Having had a fucking Ars Technica article written about Linus abusing me on LKML I have no fucking sympathy whatsoever for someone actually suffering consequences for doing the same
2024-11-26 mjg59 β RE: mjg59
Obviously it has to predate uxsup but by how much?
Is there an actual record of the first Unix system in cam.ac.uk?
2024-11-26 mjg59 β 1π€ β RE: ?
@luna Staring at this very confused until I realised I was thinking in hex and not decimal
I have a mild cold (testing negative for covid) for the first time in years. It's definitely at the level where I'd have just entirely ignored it in the beforetimes but it's the worst I've felt [β¦]
ββββ
2024-11-24 mjg59 β 1π€ 1π¬ β RE: ?
@trini Only tested on x86 and the bootm patch is certainly x86 only but everything else should work everywhere - I should really replace patch 1 with a separate loader that uses the UEFI load [β¦]
ββββ
2024-11-18 mjg59 β 1π€ β RE: ?
@ariadne and yet
2024-11-18 mjg59 β 1π¬ β RE: mjg59
The spec doesn't seem to cover this but I'd lean towards this being a Mastodon bug and any 200 range response code should probably be ok even if 202 is very, very odd?
Hilariously it appears to be impossible to reply to some gnusocial posts from Mastodon unless they've somehow already hit your instance because gnusocial returns a 202 in the get response and [β¦]
ββββ
2024-11-17 mjg59 β 1π€ β RE: ?
@zip I wonder if him getting into an argument with the fewer wrong boy has vanished forever
2024-11-17 mjg59 β 2π 2π¬
People (rightly! Justifiably!) dunking on ESR deciding that what we really need is a conversation about whether Matt Gaetz is /technically/ a paedophiles and ignoring the bit where RMS did [β¦]
ββββ
2024-11-14 mjg59 β 1π€ β RE: ?
@Claire I can't see replies, quotes don't work despite people doing them anyway, DMs show up as normal replies in some of the official tooling, my notifications tell me people are liking my [β¦]
2024-11-14 mjg59 β RE: mjg59
So I paid attention to our users and I collapsed options down so if we had three options that only made sense in two different combinations I merged that into one checkbox and ever since then I [β¦]
2024-11-14 mjg59 β 1π¬ β RE: mjg59
Maybe this is informed by my first real software dev job being writing free software accessibility tooling? Most accessibility tooling is trying to be everything for everyone so has 2 billion [β¦]
I'm the kind of free software bigot who's ported Coreboot to my laptop just so I had a laptop that ran Coreboot and even *I* think Mastodon's UX is awful
ββββ
2024-11-12 mjg59 β RE: mjg59
(Also assisted with the drinking of 29 cheap beers and the pouring out of a 30th to commemorate the 29 men of the Edmund Fitzgerald and the ship herself, ticking off more US culture boxes)
2024-11-12 mjg59 β 1π¬ β RE: mjg59
Did meet some excellent people and see some amazing t-shirts though, so can't be all that sad
Sad to have missed Purplecon, was unfortunately at another conference over the weekend and now need a different excuse to get back to Australia :(
ββββ
Things are shit but I'm in a Linkedin group chat where the only acceptable contributions are the auto-suggest responses it gives and it's beautiful
2024-11-06 mjg59 β 1π¬ β RE: mjg59
(Spoiler: It's not good)
2024-11-06 mjg59 β 1π 1π¬
alex.github.io/nyt-2024-electi⦠is a good representation of what would be needed for a Harris victory now.
Shit's fucked, yo
Amazing my manager is spending this evening approving expense reports A+ distraction technique
ββββ
ββββ