42

I understand LUKs can be used to encrypt your data. But what would prevent somebody plug in a USB with and just wipe my drive?

On traditional BIOS like Lenovo, HP, Dell and even Framework you can set a supervisor password that locks the boot menu. So nobody can boot from the USB.

Coreboot is different though. I spoke with Starlabs whose computers run Coreboot, and apparently you can have the boot menu password. OTOH, Sys76's Coreboot doesnt allow such things.

I ask because i want to libreboot my T480, but the number 1 thing i worry is unauthorized USB boot.

This one: https://libreboot.org/docs/linux/grub_hardening.html#grub-password

seems to only lock the ability to edit the grub entry freely, aka press "e" to change stuff when grub fails to boot.

you are viewing a single comment's thread
view the rest of the comments
[-] Ooops@feddit.org 31 points 3 weeks ago* (last edited 2 weeks ago)

Nothing will prevent him from wiping your drive if he has physical access to your device.

Sure you can use stuff like Secure Boot with your own custom keys to lock it. Then noone can indeed just boot it.

Doesn't stop that person from removing your drive and plugging it into another pc. Or from just smashing your disk to pieces.

The same goes for stuff like a bios password. With physical access you can wipe that, too. It's just a bit more work (or requires additional tools) than just an USB stick.

In short: Yes, you can stop someone from just booting an USB stick and wipe you drive. But it doesn't matter if he has other ways to do the same. Protection only works as a whole concept, Software won't help you when physical security allows the device to be stolen. And seriously? Who cares if their stolen laptop is wiped, smashed or drowning on the bottom of the ocean. It's gone anyway.

The actual protection for data is a) backups so you don't lose them and b) encryption so nobody can read them.

[-] starsoaked_lily@lemmy.ml -4 points 2 weeks ago

why assume the attacker is a guy?

[-] Ooops@feddit.org 4 points 2 weeks ago* (last edited 2 weeks ago)

Because the fictious person stealing your laptop and drilling through your disk to erase it identifies as male. I have a whole backstory worked out if you are interested...

Or because it doesn't matter at all and two letters were simply the shortest.

load more comments (7 replies)
load more comments (9 replies)
this post was submitted on 08 Sep 2026
42 points (100.0% liked)

Linux

67784 readers
871 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS