3 ms·
And yet again I have to point out how this is an obvious case of Hanlon's Razor, where stupidity is confused for malice. To install the root key is in no way a
by INTPenis 11y ago
And yet again I have to point out how this is an obvious case of Hanlon's Razor, where stupidity is confused for malice.
To install the root key is in no way an attempt at spoofing people since it would eventually be discovered and exploited by someone else. If Dell wanted to use this pre-installed cert they would not have installed the private key. And even then it would eventually be discovered much more easily than any number of backdoor methods they could have pre-installed in the BIOS or the OS when they control the entire deployment and shipping process.
- sbarre 11y agoSo this was basically a process/QA failure then. Someone did this (again without malice but clearly misguided), and it wasn't caught by any process that should have noticed or prevented these kinds of dangerous errors.
- acdha 11y agoThe only malice that I can see being assumed is in your reading of that report. The EFF page very clearly outlines the problem but said nothing about Dell trying to abuse it, only that Dell's negligence left their users exposed to attackers which is a simple statement of fact.
- tedunangst 11y agoRead the other comments on this page?