Secureboot error in acer laptop

Astatine · January 16, 2025, 11:43pm

Fwiw, Ventoy, as far as I’m aware, isn’t a good option due to an huge security issue. Please take a look at:

https://www.openwall.com/lists/oss-security/2024/03/29/4

[issue]: Remove BLOBs from the source tree

opened 05:47AM - 03 Apr 24 UTC

FairyTail2000

### What happened? Due to the recent XZ-Utils drama I checked the code and I'…m appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/cryptsetup https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/Unix/ventoy_unix https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/DMSETUP There is no reason to have those not be build in the release process. Of course it's convenient, they are prebuild, it's fast and nobody has a problem with it. Recent events however showed that these BLOBs can contain everything and nothing. The build instructions would not produce the exact same executable for everyone. It's better to have GitHub build it on-push and use them out of the build cache. I would do it myself, but unfortunately I'm not familiar enough with the Ventoy build process to actually do it. I understand that removing BLOBs isn't a priority over new and shiny features. But due to recent events, this should be rethought. Thank you for reading this and I hope for a productive conversation