CVE-2022-21894 VS tor-relay-docker

ESET described what BlackLotus does to exploit baton drop:

CVE-2022-21894 PoC: Secure Boot Security Feature Bypass Vulnerability https://github.com/Wack0/CVE-2022-21894

The write-up I saw suggests that revoking the Windows bootloader would cause existing install and restore images to fail to boot even with Secure Boot disabled because it checks its own signature, which would be pretty amazing if true: https://github.com/Wack0/CVE-2022-21894

See Configuration and syntax changes and Special packages. The latter this time includes changes around NextCloud 23 and Tor Browser prior to 12.5, both of which should be upgraded beforehand.

That stuff is exactly what the Tor Browser is for: <https://www.torproject.org/download/>. No need for any of that other stuff.

Then you're using it wrong. GPG isn't adding anything to this that SHA256 wouldn't, and you're just relying on the SSL certificate.

Look at your list of CAs sometime. There's multiple national organizations there. Controlled by a government.

And any of those will be deemed as valid, so if you go to https://www.torproject.org/download/ and it's signed by a Chinese CA for some reason, to your browser that's perfectly fine.

> What are the chances the official site AND the archive were both compromised?

You're talking about a piece of software that's designed to hide stuff from state level actors. If you're in actual need of such a thing, that threat is pretty damn serious.

Download the Tor app here

First if you know nothing about the darkweb and darknet markets, the first step is getting the tor browser here- www.torproject.org/download/

You need Git, Docker, and a browser that's able to handle .onion addresses (e.g., Tor Browser or Brave).

Install Tor Browser.

Anonymous has released the following press release, encouraging whistleblowers to leak information about UAPs, UFOs and NHIs. YouTube Video: https://youtu.be/DqDOz5UJ83A Disclosure leak website: https://disclosure.youranon.news Tor Browser: https://www.torproject.org/download/ Tails OS: https://tails.net/install/download/ Onion Links may be updated as necessary on the Disclosure Website. We may install multiple links depending on traffic. We ask that only serious people who have information send files! Thank you! _______________________________________________________________

Tor browser: https://www.torproject.org/download/