3 ms·
> To work with supported versions of Windows, third-party drivers must first be digitally signed by Microsoft to certify that they are trustworthy and meet secu
by tamimio 3y ago
> To work with supported versions of Windows, third-party drivers must first be digitally signed by Microsoft to certify that they are trustworthy and meet security requirements.
That’s a very bold statement when you can replicate a signature, so now the malware is “trustworthy” https://github.com/secretsquirrel/SigThief https://github.com/secretsquirrel/SigThief
- Arnavion 3y agoYour link is about AVs implementing signature verification of binaries incorrectly, not Windows implementing signature verification of drivers incorrectly.