←back to thread

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

(securityonline.info)
658 points transpute | 1 comments | 06 May 23 17:39 UTC | HN request time: 0s | source
Show context
Animats ◴[06 May 23 19:45 UTC] No.35844753[source]▶
There's an upside to this. It can be used politically as an argument against backdoors for "lawful access"[1] to encrypted data.

[1] https://www.fbi.gov/about/mission/lawful-access

replies(6): >>35844809 #>>35844880 #>>35844886 #>>35845051 #>>35845431 #>>35850810 #
1. smoldesu ◴[06 May 23 20:22 UTC] No.35845051[source]▶
It's funny how blatantly the NSA doesn't care. They feign ignorance when asked or FOIA requested about it, but then also ask for a backdoor to opt-out of the Intel Management Engine[0]. It's like there's no coordinated effort to deny that it's an extreme vulnerability.

[0] https://en.wikipedia.org/wiki/Intel_Management_Engine#%22Hig...