3 ms·
OK. You literally said: > [Device Guard] does prevent quite a few different malware preinstallation methods. Including the infamous Lenovo one. Which is the i
by AshamedCaptain 4y ago
OK. You literally said:
> [Device Guard] does prevent quite a few different malware preinstallation methods. Including the infamous Lenovo one.
Which is the infamous Lenovo malware "preinstallation method" ?
How would a signature system would have prevented malware that was literally signed by Lenovo _and_ MS from being preinstalled on a Lenovo OEM image shipped with Lenovo hardware ?
- Avamander 4y ago> OK. You literally said: Yes, and I didn't call it a "kernel rootkit" as you said I did. > How would a signature system would have prevented a malware that was literally signed by Lenovo _and_ MS from being preinstalled on a Lenovo OEM image ? Because AFAIK Device Guard sets limitations to what WPBT can do. Not to mention it's likely that additional kernel and boot integrity helps against all types of malware.
- AshamedCaptain 4y agoSuperfish was never shipped with WPBT (it was preinstalled), so please do make explicit which malware you are referring to.