4 ms·
Can you elaborate on why it's not secure? Too many people have MS signed keys that just work out of the box ?
by MichaelGG 10y ago
Can you elaborate on why it's not secure? Too many people have MS signed keys that just work out of the box ?
- deleted 10y ago[deleted]
- JonathonW 10y agoMicrosoft's secure boot key is compromised* on ARM, and it's not feasible to revoke and replace it. AFAIK, Secure Boot is still secure on x86_64, at least if you trust Microsoft to not be doing something (either deliberately or unintentionally) malicious. * The key isn't actually exposed, but a signed binary that will run unsigned code has been-- which allows secure boot to be bypassed without turning it off on affected systems.
- devrandomguy 10y agoFound the story: https://arstechnica.com/security/2016/08/microsoft-secure-boot-firmware-snafu-leaks-golden-key/ https://arstechnica.com/security/2016/08/microsoft-secure-bo... It's things like this that make me want to try using an FPGA dev kit as my next motherboard. Not because the FPGA is relevant to this, but because it demands a lot of the high speed components (CPU cores, RAM controller) that a desktop computer would have. Mind you, having an FPGA running the show would be the ultimate in extensibility.