3 ms·
There are also vulnerable bootloaders signed with the MS production CA. The DBX set is not just shim hashes, you know. If MS's distrusts its own ability to vet
by AshamedCaptain 4y ago
There are also vulnerable bootloaders signed with the MS production CA. The DBX set is not just shim hashes, you know.
If MS's distrusts its own ability to vet other people's code, why trust their ability to vet their own code?
- Avamander 4y ago> If MS's distrusts its own ability to vet other people's code, why trust their ability to vet their own code? If you want to do the legwork yourself, feel free to roll your own PKI and sign things you trust yourself.
- AshamedCaptain 4y agoThis fails to answer the question.
- Avamander 4y agoIt was a leading question, answer to which only you can know based on your threat model. I did however say what you can do if you don't trust Microsoft, which also makes the question quite irrelevant.
- deleted 4y ago[deleted]