←back to thread

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

(securityonline.info)
658 points transpute | 1 comments | 06 May 23 17:39 UTC | HN request time: 0.001s | source
Show context
codedokode ◴[06 May 23 18:40 UTC] No.35844123[source]▶
Isn't it good? Does leaked key mean that now owners of hardware will be able to read and modify the firmware, including IME, and check it for backdoors?

Such keys should be in the hands of users, not Intel.

replies(5): >>35844144 #>>35844419 #>>35844928 #>>35845513 #>>35845801 #
tapoxi ◴[06 May 23 19:08 UTC] No.35844419[source]▶
Realistically it means a lot more people are going to cheat in Valorant.
replies(2): >>35844572 #>>35844631 #
shrimp_emoji ◴[06 May 23 19:31 UTC] No.35844631[source]▶
Oh no! Here, please, backdoor my OS with a kernel anticheat -- anything that saves me from cheaters in the current bideo game of the month! D:
replies(4): >>35844767 #>>35844891 #>>35844904 #>>35845450 #
CircleSpokes ◴[06 May 23 20:03 UTC] No.35844904[source]▶
I honestly don't understand why people act like this. Wanting to be able to ensure firmware isn't maliciously modified is a good thing. Open firmware is also a good idea obviously but there has to be a way to ensure firmware is signed either by OEM or your own keys like secure boot.

As for games, lots of people play games and want good anticheat. If you don't like that you don't have to play those games but no need to act like the way you are because other people want decent anticheat.

replies(5): >>35845630 #>>35845936 #>>35845943 #>>35846925 #>>35847251 #
codedokode ◴[06 May 23 22:33 UTC] No.35845936[source]▶
> As for games, lots of people play games and want good anticheat

Great, let's install a backdoor in every computer so that some people can play games and watch movies. No. Computer is a thing for computing numbers not a replacement for a TV.

replies(1): >>35846065 #
CircleSpokes ◴[06 May 23 22:51 UTC] No.35846065[source]▶
I can't take people like you seriously. The anticheat isn't a backdoor. It doesn't ship with the operating system or come preinstalled in anyway. You opt into it when you play the game. Literally nothing is forcing you to use it or have it installed on your computer.

I understand this is the internet and being super dramatic is part of it but can we please be for real for one moment?

replies(2): >>35846511 #>>35847526 #
1. chaps ◴[07 May 23 03:07 UTC] No.35847526[source]▶
What's wrong with people being upset that in order to play the game they have to install low level kernel modules? It's flawed software that hits an ant with a sledgehammer. Adding to injury, tons of reports online of people getting BSODs and other security features not working while the module is enabled. It's invasive and it's silly to be as dismissive as you are around peoples' concerns.

https://www.reddit.com/r/riotgames/comments/12wr2hz/kernelmo...

https://www.reddit.com/r/ValorantTechSupport/comments/kfxy9a...