Conversation

Notices

1. Embed this notice
   Kenn White (kennwhite@mastodon.social)'s status on Friday, 26-Jul-2024 22:24:50 JST Kenn White

   • Dan Goodin

   Protip: When choosing a root-of-trust encryption key for a hardware secure enclave, maybe don't use the vendor's asymmetric key literally labeled "CN=DO NOT TRUST - Test PK". New scoop by @dangoodin: Secure Boot is Completely Broken on 200+ Models from 5 Big Device Makers

   https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/

   • clacke likes this.
   • Embed this notice
     Kenn White (kennwhite@mastodon.social)'s status on Friday, 26-Jul-2024 22:25:01 JST Kenn White

     in reply to

     Great quote: “Imagine all the people in an apartment building have the same front door lock and key. If anyone loses the key, it could be a problem for the entire building. But what if things are even worse and other buildings have the same lock and the keys?”

     clacke likes this.