[sf-lug] Notes from the SF-LUG meeting of November 5, 2017

[Daniel Gimpelevich]

On Sun, 2017-11-05 at 20:50 -0800, Rick Moen wrote:
> But somehow it's OK for them to boot optical disks you've burned on
> that
> _same_ machine that you characterise as 'exposed to malware' -- and
> probably to connect to the global Internet in places like cafes?  That
> makes no sense at all.

But, once they are burned, they are read-only, and their hash sums can
still be verified. Media that are not read-only, such as USB sticks and
machines on a network, can theoretically be hijacked _after_ this
verification. There are people for whom this makes a difference.
However, those who are serious would likely be migrating off anything
subject to Intel's Management Engine and its AMD equivalent, so the main
aim of doing it this way is social-engineering the masses.