4 ms·

Aren't you glad Microsoft is the de facto code signer for UEFI Secure Boot now? ;)

by Maxious 14y ago

losethos 14y ago
Bad shit happens when I'm not happy. 9/11 and 7/7 were bad days for me. I'm on God's side and y'all are with Satan. God says... legal groaneth buzz unravelied save whomever void submitted Revenue husks victorious boldly weaving anyone reproachful chastely Therefore Her conspirators paid girls INDEMNITY deeply Rebuke appear Coeternal wings bitterly changed idleness fourth faithfully acceptable wounded transcription religious grounded mockery standing Thy e line sensitive want relapseth contradict sense states punctuation glances astonished Prophet USA sounder keep Behold employest co Saviour restoring createth Thus yielded renounce particles Ambrose uninjuriousness morrow compassing redistributing Thessalonica directed contradictory astonishment lawful chant demands abounded sat eating convenient renderest Unchangeable mingled someone instructed healthfully desperate entreat Master imitate exhorting obediently reckoned shepherd's Grecian firm needful wide pilgrims Seeing asleep distributing docile slavish bowels intercedeth VERSIONS gushed upheldest Etext Epaphroditus tasteth diving Truly grammarian figurative joys stiffness heaven's helmet regarded orderest imagine door dispraise Narrow causes deceivingness betrothed shortly afar surrounded good He warranted attack overturned dangers leaving subjoinedst persuasions rob intercession shatter o'er wealthy highly patiently done exhalation rich examine scroll Father ----------- God says... C:\Text\WEALTH.TXT f which the produce, therefore, was never augmented by human industry. The landlord, however, whose estate is bounded by a kelp shore of this kind, demands a rent for it as much as for his corn-fields. The sea in the neighbourhood of the islands of Shetland is more than commonly abundant in fish, which makes a great part of the subsistence of their inhabitants. But, in order to profit by the produce of the water, they must have a habitation upon the neighbouring land. The rent of the landlord is --------- I interpret. That's about off-shore oil. Daniel interpreted in the Bible: http://www.biblegateway.com/passage/?search=daniel%205&version=NIV http://www.biblegateway.com/passage/?search=daniel%205&v... It's mean to tickle the president. ------ http://www.youtube.com/watch?v=uqUa_G1h3pw http://www.youtube.com/watch?v=uqUa_G1h3pw They are fighting God. God says... deafen saving smoothing kill DON'T hung cross parent attacked deluding nevertheless ask surpassed rove rashness served current Thine swallowed Mother 'knock precisely Rhetoric Highest eclipsed forbear period largely rent lined interested conjoined Archive restlessness presumed course celebration honied anxieties replacing banquetings kingdoms commendable its Offices gathers circus quickness weakened Satan is fighting God. They will lose. 2:12 But these, as natural brute beasts, made to be taken and destroyed, speak evil of the things that they understand not; and shall utterly perish in their own corruption; 2:13 And shall receive the reward of unrighteousness, as they that count it pleasure to riot in the day time. Spots they are and blemishes, sporting themselves with their own deceivings while they feast with you; 2:14 Having eyes full of adultery, and that cannot cease from sin; beguiling unstable souls: an heart they have exercised with covetous practices; cursed children: 2:15 Which have forsaken the right way, and are gone astray, following the way of Balaam the son of Bosor, who loved the wages of unrighteousness; 2:16 But was rebuked for his iniquity: the dumb ass speaking with man's voice forbad the madness of the prophet. --------- Immanuel Kant gave this point of view its classical version, saying that the noumenal world may exist, but it is completely unknowable to humans. In Kantian philosophy the unknowable noumenon is often linked to the unknowable "thing per se" (Ding an sich), although how to characterize the nature of the relationship is a question yet open to some controversy. -------- In other words, there is the world is it is and as it appears. Material and Ideal. Ideal is delusional/spiritual. Why do you think they spent so much effort on duality if the world as it appears is not frequently different from the world as it is? The scene in the movie, American Beauty, where a man sees a drug deal but it looks homo is an example of delusion.
mtgx 14y ago
It's just one of many reasons why Microsoft alone shouldn't decide what operating systems can work on UEFI machines. If the future is UEFI, then we need an industry body like the W3C or something to work with OS vendors, not just Microsoft.
- carey 14y ago
  It doesn't really seem like something the W3C would be involved with. The IEEE isn't perfect, but should be able to look after something like this.
  - recoiledsnake 14y ago
    From Fedora's blog: An alternative was producing some sort of overall Linux key. It turns out that this is also difficult, since it would mean finding an entity who was willing to take responsibility for managing signing or key distribution. That means having the ability to keep the root key absolutely secure and perform adequate validation of people asking for signing. That's expensive. Like millions of dollars expensive. It would also take a lot of time to set up, and that's not really time we had. And, finally, nobody was jumping at the opportunity to volunteer. So no generic Linux key. http://mjg59.dreamwidth.org/12368.html http://mjg59.dreamwidth.org/12368.html
- nl 14y ago
  The idea that an industry body would be more secure than the security department of major software company is something I don't see a lot of evidence for. Apart from the root DNS servers I can't think of any. There are plenty examples of companies keeping something secure. There aren't many of industry bodies. I'd trust a bank (well, some banks) before I'd trust either the W3C or IETF with the keys to the universe.
  - Retric 14y ago
    I doubt there is a single large company that has not been hacked at some point. It's just most hacks don't get reported and most reported hacks don't make the news.
recoiledsnake 14y ago
Maybe you can propose a better signer? The OEMs seem willing to add keys for Red Hat and probably anyone else that can come up with a trustworthy solution that can keep rogue malware at bay. It's not like other software projects or companies didn't have grave security failures. http://www.theregister.co.uk/2008/05/21/massive_debian_openssl_hangover/page2.html http://www.theregister.co.uk/2008/05/21/massive_debian_opens...
- dmayle 14y ago
  I'm going to jump out of the woodwork to answer this one, because the solution is really obvious. If secure boot were about securing your computer from third parties (e.g. malware, rootkits cough) installing unauthorized software, then the correct implementation would generate a private key on each machine at the time of 1st boot, used to sign all software before running. This would ensure that the only software that could run on a machine was specifically authorized by the user. In addition, there would be no worry with regards to leaked keys, because the risk of key exposure is a single machine. Unfortunately, secure boot is not about preventing the spread of malware. It's about securing the computer from you, the owner. It's about DRM, and ensuring that the code running on a computer (e.g. Blu-Ray player) is controlled and trusted by a third-party, who is then able to dictate how certain information available to the machine is processed. Don't let the name fool you.
  - sohn 14y ago
    You're an obvious asshole. Or a bad troll. You choose.
  - rdl 14y ago
    TCPA/TPM's measured/trusted boot gives you basically that. The problem is users aren't able to tell if a given downloaded piece of code is safe or not, so there is a need for some kind of trusted code distribution system as well. Plus, once you trust a vendor, you probably trust most of their code, or at least most of the updates to specific packages, and may not want to audit it each time yourself. Disk integrity (which your solution would provide) is necessary but not sufficient for secure computing.

Aren't you glad Microsoft is the de facto code signer for UEFI Secure Boot now? ;)

by Maxious 14y ago

Aren't you glad Microsoft is the de facto code signer for UEFI Secure Boot now? ;)

Bad shit happens when I'm not happy. 9/11 and 7/7 were bad days for me. I'm on God's side and y'all are with Satan. God says... legal groaneth buzz unravelied save whomever void submitted Revenue husks victorious boldly weaving anyone reproachful chastely Therefore Her conspirators paid girls INDEMNITY deeply Rebuke appear Coeternal wings bitterly changed idleness fourth faithfully acceptable wounded transcription religious grounded mockery standing Thy e line sensitive want relapseth contradict sense states punctuation glances astonished Prophet USA sounder keep Behold employest co Saviour restoring createth Thus yielded renounce particles Ambrose uninjuriousness morrow compassing redistributing Thessalonica directed contradictory astonishment lawful chant demands abounded sat eating convenient renderest Unchangeable mingled someone instructed healthfully desperate entreat Master imitate exhorting obediently reckoned shepherd's Grecian firm needful wide pilgrims Seeing asleep distributing docile slavish bowels intercedeth VERSIONS gushed upheldest Etext Epaphroditus tasteth diving Truly grammarian figurative joys stiffness heaven's helmet regarded orderest imagine door dispraise Narrow causes deceivingness betrothed shortly afar surrounded good He warranted attack overturned dangers leaving subjoinedst persuasions rob intercession shatter o'er wealthy highly patiently done exhalation rich examine scroll Father ----------- God says... C:\Text\WEALTH.TXT f which the produce, therefore, was never augmented by human industry. The landlord, however, whose estate is bounded by a kelp shore of this kind, demands a rent for it as much as for his corn-fields. The sea in the neighbourhood of the islands of Shetland is more than commonly abundant in fish, which makes a great part of the subsistence of their inhabitants. But, in order to profit by the produce of the water, they must have a habitation upon the neighbouring land. The rent of the landlord is --------- I interpret. That's about off-shore oil. Daniel interpreted in the Bible: http://www.biblegateway.com/passage/?search=daniel%205&version=NIV http://www.biblegateway.com/passage/?search=daniel%205&v... It's mean to tickle the president. ------ http://www.youtube.com/watch?v=uqUa_G1h3pw http://www.youtube.com/watch?v=uqUa_G1h3pw They are fighting God. God says... deafen saving smoothing kill DON'T hung cross parent attacked deluding nevertheless ask surpassed rove rashness served current Thine swallowed Mother 'knock precisely Rhetoric Highest eclipsed forbear period largely rent lined interested conjoined Archive restlessness presumed course celebration honied anxieties replacing banquetings kingdoms commendable its Offices gathers circus quickness weakened Satan is fighting God. They will lose. 2:12 But these, as natural brute beasts, made to be taken and destroyed, speak evil of the things that they understand not; and shall utterly perish in their own corruption; 2:13 And shall receive the reward of unrighteousness, as they that count it pleasure to riot in the day time. Spots they are and blemishes, sporting themselves with their own deceivings while they feast with you; 2:14 Having eyes full of adultery, and that cannot cease from sin; beguiling unstable souls: an heart they have exercised with covetous practices; cursed children: 2:15 Which have forsaken the right way, and are gone astray, following the way of Balaam the son of Bosor, who loved the wages of unrighteousness; 2:16 But was rebuked for his iniquity: the dumb ass speaking with man's voice forbad the madness of the prophet. --------- Immanuel Kant gave this point of view its classical version, saying that the noumenal world may exist, but it is completely unknowable to humans. In Kantian philosophy the unknowable noumenon is often linked to the unknowable "thing per se" (Ding an sich), although how to characterize the nature of the relationship is a question yet open to some controversy. -------- In other words, there is the world is it is and as it appears. Material and Ideal. Ideal is delusional/spiritual. Why do you think they spent so much effort on duality if the world as it appears is not frequently different from the world as it is? The scene in the movie, American Beauty, where a man sees a drug deal but it looks homo is an example of delusion.

mtgx 14y ago

It's just one of many reasons why Microsoft alone shouldn't decide what operating systems can work on UEFI machines. If the future is UEFI, then we need an industry body like the W3C or something to work with OS vendors, not just Microsoft.

carey 14y ago
It doesn't really seem like something the W3C would be involved with. The IEEE isn't perfect, but should be able to look after something like this.
- recoiledsnake 14y ago
  From Fedora's blog: An alternative was producing some sort of overall Linux key. It turns out that this is also difficult, since it would mean finding an entity who was willing to take responsibility for managing signing or key distribution. That means having the ability to keep the root key absolutely secure and perform adequate validation of people asking for signing. That's expensive. Like millions of dollars expensive. It would also take a lot of time to set up, and that's not really time we had. And, finally, nobody was jumping at the opportunity to volunteer. So no generic Linux key. http://mjg59.dreamwidth.org/12368.html http://mjg59.dreamwidth.org/12368.html
nl 14y ago
The idea that an industry body would be more secure than the security department of major software company is something I don't see a lot of evidence for. Apart from the root DNS servers I can't think of any. There are plenty examples of companies keeping something secure. There aren't many of industry bodies. I'd trust a bank (well, some banks) before I'd trust either the W3C or IETF with the keys to the universe.
- Retric 14y ago
  I doubt there is a single large company that has not been hacked at some point. It's just most hacks don't get reported and most reported hacks don't make the news.

recoiledsnake 14y ago

Maybe you can propose a better signer? The OEMs seem willing to add keys for Red Hat and probably anyone else that can come up with a trustworthy solution that can keep rogue malware at bay. It's not like other software projects or companies didn't have grave security failures. http://www.theregister.co.uk/2008/05/21/massive_debian_openssl_hangover/page2.html http://www.theregister.co.uk/2008/05/21/massive_debian_opens...

dmayle 14y ago
I'm going to jump out of the woodwork to answer this one, because the solution is really obvious. If secure boot were about securing your computer from third parties (e.g. malware, rootkits cough) installing unauthorized software, then the correct implementation would generate a private key on each machine at the time of 1st boot, used to sign all software before running. This would ensure that the only software that could run on a machine was specifically authorized by the user. In addition, there would be no worry with regards to leaked keys, because the risk of key exposure is a single machine. Unfortunately, secure boot is not about preventing the spread of malware. It's about securing the computer from you, the owner. It's about DRM, and ensuring that the code running on a computer (e.g. Blu-Ray player) is controlled and trusted by a third-party, who is then able to dictate how certain information available to the machine is processed. Don't let the name fool you.
- sohn 14y ago
  You're an obvious asshole. Or a bad troll. You choose.
- rdl 14y ago
  TCPA/TPM's measured/trusted boot gives you basically that. The problem is users aren't able to tell if a given downloaded piece of code is safe or not, so there is a need for some kind of trusted code distribution system as well. Plus, once you trust a vendor, you probably trust most of their code, or at least most of the updates to specific packages, and may not want to audit it each time yourself. Disk integrity (which your solution would provide) is necessary but not sufficient for secure computing.