[so_real]

Doesn't this exploit require physical access to the hardware?

[ShadowAce]

Yeah, pretty much. However, GRUB comes before the kernel startup, so what's going on here is that GRUB can impose a password before it even chooses which kernel to boot (and which mode to boot into).

Having to input a GRUB password was considered a way around the "physical access means single user mode" exploit. This vulnerability puts the lie to that concept.

However, there is already a fix for this. We don't have to wait forever, or the next service pack, for a fix to be available.

[Scrambler Bob]

Doesn’t this exploit require physical access to the hardware?

---

Beware if your cat gets ‘radicalized’ and then wanders over to your keyboard, backspacing 28 times.

See.

Don’t be scared, but be vigilant.