3 ms·
Microsoft's secure boot key is compromised* on ARM, and it's not feasible to revoke and replace it. AFAIK, Secure Boot is still secure on x86_64, at least if y
by JonathonW 9y ago
Microsoft's secure boot key is compromised* on ARM, and it's not feasible to revoke and replace it.
AFAIK, Secure Boot is still secure on x86_64, at least if you trust Microsoft to not be doing something (either deliberately or unintentionally) malicious.
* The key isn't actually exposed, but a signed binary that will run unsigned code has been-- which allows secure boot to be bypassed without turning it off on affected systems.
- devrandomguy 9y agoFound the story: https://arstechnica.com/security/2016/08/microsoft-secure-boot-firmware-snafu-leaks-golden-key/ https://arstechnica.com/security/2016/08/microsoft-secure-bo... It's things like this that make me want to try using an FPGA dev kit as my next motherboard. Not because the FPGA is relevant to this, but because it demands a lot of the high speed components (CPU cores, RAM controller) that a desktop computer would have. Mind you, having an FPGA running the show would be the ultimate in extensibility.