←back to thread

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

(securityonline.info)
658 points transpute | 1 comments | 06 May 23 17:39 UTC | HN request time: 0.209s | source
Show context
thathndude ◴[06 May 23 18:46 UTC] No.35844191[source]▶
This was always a dumb idea. No different than a “master” TSA key. All it does is create a single point of failure.
replies(5): >>35844335 #>>35844411 #>>35844581 #>>35845052 #>>35845754 #
rvba ◴[06 May 23 20:22 UTC] No.35845052[source]▶
It was a genius idea - you cannot install Windows 11 on an old computer. So you need to buy a new one.

Monopoly practice hidden as security.

replies(2): >>35845255 #>>35846509 #
sobkas ◴[06 May 23 23:53 UTC] No.35846509[source]▶
> It was a genius idea - you cannot install Windows 11 on an old computer. So you need to buy a new one.

> Monopoly practice hidden as security.

Actually you can, it's only checked by installer, if you modify it there is nothing stopping you from installing it. I have installed one on my parents computer. CPU wasn't supported but after installation everything worked ok.

replies(1): >>35846557 #
userbinator ◴[07 May 23 00:05 UTC] No.35846557[source]▶
The point is that it's more difficult and acts as discouragement. Ditto for the elusiveness of the word "support" --- it can mean anything from "nearly impossible" to "it works but we don't want you to".
replies(1): >>35846783 #
philistine ◴[07 May 23 00:52 UTC] No.35846783[source]▶
Yeah. Microsoft not allowing me to install Windows 11 on my 486 is a secret ploy to force me to upgrade, when Microsoft makes no money on new sales of computers!
replies(3): >>35847290 #>>35848736 #>>35860398 #
1. irusensei ◴[07 May 23 07:09 UTC] No.35848736[source]▶
A first gen Ryzen is not a 486.