I deploy so many of these things. I don't even know what to say.
Fortinet as a security company is like asking a sieve to hold water.
The amount of cvss 10 scores show they've got the high score.
If they protect their own network with Fortigate devices no matter the utp atp whatever, they've probably been breached for a while.
Hard not to be cynical.
This is no different to me having a email dedicated to searching for a house to give to real estate agents and someone saying "I don't think it's legal that a house has an email". It was frustrating reading up until your comment that people just didn't get it.
Google looks. Google reports. Even if you did nothing wrong you're guilty until you prove innocent and even then you'll never get your account back.
Yeah as a sysadmin I'd also like to ensure casual readers note that windows 11 22h2 is EOL in Ends in 4 weeks (08 Oct 2024).
https://endoflife.date/windows
Please don't run windows without security patches. Every month there's about 4 active exploited zero day security vulnerabilities finally getting their patch. https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2024-patch-tuesday-fixes-4-zero-days-79-flaws/
Each month past end of security patch releases just grows your exposure. On Windows and Linux alike.
Coming in Windows 11 24h2 is live patch, Microsoft's catch up to Linux (a decade late).
I spent like 20 minutes self hosting and running over tailscale so traffic is always private... Never had an issue. I've got over 20 devices accessible on it.
Easy to remote register over ssh just by sending the installer plus running with server name plus key, then setting a static password.
I still think gaming wide moonlight is great though. You won't really regret that.
The hand-etched apology will not appear on the company’s actual devices come global launch
Luckily the article addresses this.
Other then legacy and uefi does it have a CSM compatibility support mode? An option to enable usb initialisation before bios? Eg wait for usb initialisation?
Some "boot faster" options kind of reorder boot initialisation to a point where it's not holding the system back.
Though I'm really running out of suggestions.. I can imagine you're pretty frustrated. I know my Dell laptop was a pain to get the right settings to get usb to boot and the stupid 100db beep to silent on boot interruption.
And you probably confirmed that live boot worked too I assume.
In the actual bios, can you see a boot order and see uefi for Windows/whatever is on your internal disk? But not any other entries?
I suggest a few more things:
Try a different brand usb. Different motherboards sometimes don't support some usb brands. In fact, a Lenovo server I rebuilt refused to boot off certain usbs.
Some motherboards don't initialise boot off some usb ports. Sometimes the additional ports are on another controller and initialise too slow.
Just try a straight working Ubuntu live boot usb to remove any ventoy from equation. Ubuntu has real signed uefi (and no shim) granted by Microsoft. I think that's how it works, uefi is a mess.
Try to start isolating all the different factors, and there could be more. It doesn't necessarily mean anything definitive if it works on another machine.
I was using trillion in 2000 until I think the freeware started suggesting pro on 2002 and moved to pidgin from then until MSN messenger stopped working one day meaning messengers I had back then got fragmented. I stopped using all messengers shortly after.
Hearing news about pidgin is like a blast from the past.
The application yes, but the programmer? That requires network, api and a sent packet or more.
Just because you run a binary doesn't mean a server across the Internet knows you.
Users though, disregard my advice. Assume what you run is running foreign remote code that could encrypt and ransom you.
Bleeping computer was blocking my vpn but that also sounds common. Not only is there heaps of controls through conditional access policies where you can use device compliance policies and mass download defender for office 365 rules to detect these things, Microsoft also allow a bunch of ways to circumvent that through publishing enterprise apps and leave it to you not to lose your keys. I use one such app a lot called pnp powershell so my powershell can access basically everything and do anything so I can script largely migrations and audits of those migrations into sharepoint. While I do remove that app at the end of my projects, most people just move on.
Of course pure speculation. It's just not even hard to either footgun yourself, and fortinet have been known to be shooting themselves in the foot, even assuming they tried to put controls in, in the first place.
I'll read the actual article when I get home to see how impacted I will be though. As a customer, seller and with certifications. Not to mention, maybe there's something for me to learn about the whole thing anyway.