4 ms·
> Or maybe a deliberate effort by developers who are paid by a three letter agency to sneak in a backdoor that looks like an accidental bug. Why would a three-
by josteink 10y ago
> Or maybe a deliberate effort by developers who are paid by a three letter agency to sneak in a backdoor that looks like an accidental bug.
Why would a three-letter agency bother to do that, when they could just as well get their malware EFI module signed by MS, and thus pass the secure-boot requirement?
That way they wont risk exposing the existence of a backdoor on every single Windows-copy deployed worldwide.
I honestly don't see the value in it for them.
- ge0rg 10y agowhen they could just as well get their malware EFI module signed by MS This is exactly what the FBI tried with Apple, causing an enormous public mud fight. Besides, the outlined method would rather be deployed by NSA, or maybe a foreign service, without legal means to get a signed malware module. Even if such legal means would exist, it would be in Microsofts best interest to fight them in court: once leaked, the malware would be clearly attributable to MS.