Lot's of props to the author for no hyperbole. Clean write-up with an essentially admission that it is "working as intended but could be communicated better."

Lot's of props to the author for no hyperbole. Clean write-up with an essentially admission that it is "working as intended but could be communicated better." Far too many security articles find "working as intended" functionality and make it sound as if it is a complete systems breach (e.g. "With an administrator account on Windows you can access ring 0 via uEFI!!" -- actual hyperbolic security announcement[0]). [0] PDF: http://www.mitre.org/sites/default/files/publications/14-2221-extreme-escalation-presentation.pdf http://www.mitre.org/sites/default/files/publications/14-222...