Hacker News Reader

What systems are those? Windows doesn’t allow you to do that by default unless you’re an admin.

Any systemd-using Linux distro will also automount /efi as writable only by root (assuming the mount was generated by GPT auto generator, not by a specific fstab entry), so it's not that either.

Normal home users are administrators, they have to go through the pop-up to run things with escalated privileges but that, according to Microsoft, is not a security boundary.

If we're considering Administrator / root access as trivially available, then any exploit becomes trivial itself. Even on a BIOS machine root can overwrite the MBR / kernel / initramfs to contain an exploit.

Sorry, the argument is:

> Windows doesn’t allow you to do that by default unless you’re an admin.

The refutation is that by default users are an admin. So no, they’re not protected against persistent threats like UEFI malware.

Yes, and thus I made the comment that I made.

Reply on news.ycombinator.com