LoloteOn the way to convert so many computers from Windows to #Linux, great moment after all
But please, stop using #Ventoy and #iVentoy, powerful but dangerous tools
Staggering realities from related sources*:
- proprietary blobs added/modified
- modified #linux drivers
- self-signed certificates added
- sources never published despite repeated #librists requests
far enough to put backdoors in installed computers ...
*
https://discuss.privacyguides.net/t/ventoy-security-concerns/20058
https://biggo.com/news/202508061917_Ventoy_Binary_Blobs_Security_Concerns
https://en.ubunlog.com/iventoy-under-suspicion-for-replacing-drivers-and-certificates/
Ventoy Security Concerns
While very useful in theory, the source tree contains numerous binary blobs without source code. This issue has been brought up to the authors multiple times, have not been corrected, and have even gotten worse (more blobs have been added to the code over time). This is a potential malware vector, similar to the “test files” in the xz-utils backdoor catastrophe… Very worrying!