According to the researcher, YellowKey appears unusual for a previously unknown security bug. Nightmare-Eclipse explained that the flaw can be reproduced by copying an attached "FsTx" folder...
IMO it’s better to not try to restrict them from running stuff, and instead to encrypt your disk. Like, they can also just pull your drive and stick it in their own machine (and you WANT to be able to pull your own drive if your computer gets in a physical crash or watered or something and stops working).
I mean, if they gain physical access to your computer, they can just boot their favorite Linux live ISO and go to town. :3
That’s true too, I guess. I suppose the only way to prevent that would be to disable USB boot, which would also make recovery impossible?
It certainly wouldn’t help recovery.
IMO it’s better to not try to restrict them from running stuff, and instead to encrypt your disk. Like, they can also just pull your drive and stick it in their own machine (and you WANT to be able to pull your own drive if your computer gets in a physical crash or watered or something and stops working).