←back to thread

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

(securityonline.info)
658 points transpute | 1 comments | 06 May 23 17:39 UTC | HN request time: 0.212s | source
Show context
thathndude ◴[06 May 23 18:46 UTC] No.35844191[source]▶
This was always a dumb idea. No different than a “master” TSA key. All it does is create a single point of failure.
replies(5): >>35844335 #>>35844411 #>>35844581 #>>35845052 #>>35845754 #
scarface74 ◴[06 May 23 22:06 UTC] No.35845754[source]▶
Do you actually have anything in your checked bag that you care if it gets stolen?
replies(3): >>35846571 #>>35847051 #>>35850821 #
1. thathndude ◴[07 May 23 12:35 UTC] No.35850821[source]▶
Might not have made my point clear. It’s not dumb because I actually trusted the TSA to keep my stuff safe. I’m a carry on guy, myself.

It was dumb because they thought the key would remain secret only to them, and thus provide an elegant balance of security and safety.