[Discuss] Possible Suspicious Blobs in Ventoy

[Zachary Liebl]

Hello, I stumbled across this GitHub issue and I am wondering what your opinions are on it. There are many binary blobs in the source tree of Ventoy and the maintainer is very quiet about it. Because Ventoy is loaded before the bootloader of its guest OSes, so it could easily install a rootkit.

Do you think is suspicious, and even if not, do you think this is a GPL violation?

https://github.com/ventoy/Ventoy/issues/2795

From,
Zachary Liebl