3 ms·
Signing firmware might help prevent replacing the firmware, but it doesn't do anything to protect against exploiting a security vulnerability in the current fir
by yencabulator 3y ago
Signing firmware might help prevent replacing the firmware, but it doesn't do anything to protect against exploiting a security vulnerability in the current firmware.
The marketing is a little too breathless to assure me that they did anything to actually make the firmware trustworthy: "Digitally Signed, Trusted Secure Firmware (RSA-2048 Bit)".
Signing something doesn't make it secure against exploits.
- transpute 3y agoSigning firmware is step 1 in raising the bar for attackers, since most flash drives have unsigned firmware which presents little barrier to attacks. If you could recommend other commercial flash drives with signed firmware, they could be compared for security vulnerabilities. Some models have FIPS-certified encryption, so they may have customers who are high-value targets, motivating attacks/testing for security vulnerabilities.