Hacking Articles

Hacking Articles Part 10 (1)

5. The installer will show you a summary of the partitioning as shown above but we need to make the change for the USB boot disk. At the moment it wants to put /boot on sda which is the built-in disk, while our USB stick is sdb. Select /boot and hit enter, after that select "Delete this partition".

6. After /boot was deleted we can create /boot on the USB stick shown as sdb. Select sdb and hit enter. It will ask if you want to create an empty partition table. Confirm that question with yes.

7. The partition summary shows sdb with no partitions on it. Select FREE SPACE and select "Create a new partition". Confirm the suggested partition size. Confirm the partition type to be "Primary".

8.It is time to tell the installer to use this new partition on the USB stick (sdb1) as /boot partition. Select "Mount point: /home" and in the next dialog select "/boot - static files of the boot loader"

9. Confirm the made changes by selecting "Done setting up the partition".

10. If the partition summary looks good, go ahead with the installation by selecting "Finish partitioning and write changes to disk".

When the installer asks if it should force EFI, then select no, as EFI is not going to protect you.

Finish the installation as usual, select your preferred desktop environment etc.)

(Pictures are below the Comment box)

8. Now install GRUB Boot Loader on a hard disk

-Confirm the dialog that wants to install GRUB to the master boot record. Here it is important to install it to the USB stick and not your built-in SATA/SSD disk! So select sdb (the USB stick) in the next dialog.

9. First Boot From USB

- Once nainstall na lahat, pwede mo na itong iboot mula sa iyong USB Stick. As simple test, pwede mong iunplug ang iyong USB Stick at yung boot ay magfefail with the note "No Operating System Found" o katulad ng ibang error message mula sa BIOS. Pero kapag hindi ito nagboot kahit na ang USB mo ay nakakonekta, them maaaring ang BIOS mo ay hindi nakaconfigure para maboot mula sa USB Media. Kapag blank screen o walang nangyari ibig sabihin nun ay hindi makahanap ang BIOS ng boot Device so kailangan mong ibahin ang boot settings sa BIOS mo.

Usually you can enter the BIOS using F1, F2, or F12 after powering on your computer. Doon sa BIOs ay mayroong menu para maconfigure ang boot order. Sa listahan na yun dapat ipakita ang USB disk/storage and kapag nabago mo na ito, save and exit the BIOS. Now it will boot from your USB stick first and GRUB will show up and proceeds with the boot process till it will ask for your passphrase to unlock the crypt volume.

10. The last step is to unmount /boot partition after Boot

- If you boot your laptop from the USB stick, we want to remove the stick after it has finished booting. Why? kasi maiiwasan nito ang pagatake para makagawa ng modifications sa iyong USB stick. at para na rin makaiwas sa pagkawala ng data, hindi lang natin kailangan tanggalin agad ang USB stick pero i-unmount mo muna yung /boot and unplug the stick. Good news mga dre dahil pwede nang automatic ang pag unmount at kailangan mo lang iunplug ang USB stick pagkatapos maboot ng iyong laptop sa Login Screen

(How:

1. Just add this line to your etc/rc.local file:

*

umount /boot

*

2. After boot you can once verify that it automatically unmounts /boot for you by running:

*

mount | grep /boot

*

Note: Kapag walang output na lumabas sa command na yan, then yung /boot ay hindi na mounted so pwede mo nang iunplug yung USB stick mo.

P.S. Kailangan mo pa rin iupgrade ang Linux Kernel mo na nasa /boot partition. Magagawa mo ito sa pamamagitan ng paggamit ng apt-get upgrade, except nalang kung dapat nakamount ang /boot bago ang lahat at iunmount ulit kapag naupgrade na ang Linux Kernel.

Now Enjoy your secured laptop!

"Disclaimer: there are still other attack vectors possible, but they are much harder to do. Your hardware or BIOS can still be modified. But not by holding down the enter key for 70 seconds or by booting a live system."

Debian Download Links:

https://www.debian.org/CD/http-ftp/

https://www.debian.org/distrib/

https://www.debian.org/CD/

https://www.debian.org/devel/debian-installer/

https://www.debian.org/News/

https://www.debian.org/CD/torrent-cd/

P.P.S. Hope you like and understand my article/guide, please wait for the Part 2 of Hacking is Art.