this post was submitted on 30 Mar 2025
95 points (84.2% liked)

Not The Onion

15570 readers
799 users here now

Welcome

We're not The Onion! Not affiliated with them in any way! Not operated by them in any way! All the news here is real!

The Rules

Posts must be:

  1. Links to news stories from...
  2. ...credible sources, with...
  3. ...their original headlines, that...
  4. ...would make people who see the headline think, “That has got to be a story from The Onion, America’s Finest News Source.”

Please also avoid duplicates.

Comments and post content must abide by the server rules for Lemmy.world and generally abstain from trollish, bigoted, or otherwise disruptive behavior that makes this community less fun for everyone.

And that’s basically it!

founded 2 years ago
MODERATORS
 

What if hackers could time travel? That’s the eyebrow-raising reality of this latest attack, and the FBI wants you to act today.

you are viewing a single comment's thread
view the rest of the comments
[–] computergeek125@lemmy.world 3 points 1 day ago

Typically the same level of permissions needed to load drivers - which if they're attacking the system using custom out of date drivers is relevant.

Having users and services at least privileges is one step of attack surface area reduction, but the "better" solution is to make sure that revocation check is enabled and that the compromised cert is revoked by its issuer. Or if it's an old, unused root, you can ban that root at the machine level.