Re: Missing item in the series?
The the most notable missing item is a link to the actual report, which states:
Obviously, the system partition is encrypted and it is not possible to decrypt it (AFAWK). But other partitions may be not (sic) encrypted, and so accessible.
Right, so ... just like booting from a thumbdrive, and you still have no access to the encrypted filesystem.
Sorry, I must have missed the part where this is a "vulnerability", somehow.
Same goes for planting malware on the boot partition, you could do that by booting from a thumbdrive, then mount any unencrypted partition from there.
The "vulnerability" here, if there is one, is anything that isn't encrypted, not the fact that you can get shell access.
Oh and yes, it certainly is possible to encrypt the boot partition.
Biting the hand that feeds IT
