4 ms·
UEFI starts with encrypted code and wraps additional layers of encrypted, signed code around it. It's impenetrable, and purposefully so. That's the practical de
by jamiesonbecker 11y ago
UEFI starts with encrypted code and wraps additional layers of encrypted, signed code around it. It's impenetrable, and purposefully so. That's the practical definition of "black box". It's huge, too, with a much larger attack surface.
https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Criticism https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_In...
- JoshTriplett 11y agoYou say "encrypted" and "signed" as though that's a bad thing. When they're used against the owner of the system, sure; however, they can also be used by the owner of the system to protect themselves. "Only runs authorized code" can be a good thing as long as you're the one doing the authorizing.
- jamiesonbecker 11y ago> "Only runs authorized code" can be a good thing as long as you're the one doing the authorizing.
- jamiesonbecker 11y agoas you're the one doing the authorizing [signing].