beep@piefed.world to Technology@lemmy.worldEnglish · 2 months agoMicrosoft’s Secure Boot has been broken for a decade and no one noticed until nowwww.welivesecurity.comexternal-linkmessage-square63linkfedilinkarrow-up1258arrow-down14file-text
arrow-up1254arrow-down1external-linkMicrosoft’s Secure Boot has been broken for a decade and no one noticed until nowwww.welivesecurity.combeep@piefed.world to Technology@lemmy.worldEnglish · 2 months agomessage-square63linkfedilinkfile-text
cross-posted from: https://piefed.world/c/tech/p/1263218/microsofts-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until-now
minus-squareevadersnack@sopuli.xyzlinkfedilinkEnglisharrow-up1·2 months agoA PKI without a CRL will eventually become exploitable.
minus-squareThe_Decryptor@aussie.zonelinkfedilinkEnglisharrow-up1·1 month agoSecure boot does have a revocation mechanism (It’s literally how this issue has been mitigated) though. You can not only load in allowed signatures, you can also load in disallowed ones so even properly signed binaries will get rejected.
A PKI without a CRL will eventually become exploitable.
Secure boot does have a revocation mechanism (It’s literally how this issue has been mitigated) though.
You can not only load in allowed signatures, you can also load in disallowed ones so even properly signed binaries will get rejected.