xavier666@lemmy.umucat.day to Linux@lemmy.mlEnglish · 1 year agoBombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterpriseeclypsium.comexternal-linkmessage-square43fedilinkarrow-up1135arrow-down138cross-posted to: linux@programming.dev
arrow-up197arrow-down1external-linkBombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterpriseeclypsium.comxavier666@lemmy.umucat.day to Linux@lemmy.mlEnglish · 1 year agomessage-square43fedilinkcross-posted to: linux@programming.dev
minus-squareferret@sh.itjust.workslinkfedilinkEnglisharrow-up32·1 year agoIf you have secure boot off OR don’t have a bios password you are just as insecure as this “vulnerability” would make you
minus-squarehalcyoncmdr@lemmy.worldlinkfedilinkEnglisharrow-up15·1 year agoSo 90% of the self-proclaimed “power users”.
minus-squareferret@sh.itjust.workslinkfedilinkEnglisharrow-up4·1 year agoSo don’t use it? How much or how little actual security secure boot provides is a topic that has been discussed to oblivion. I brought it up to make a point of how badly people are overreacting about the severity of this latest framework news.
minus-squareWFH@lemmy.ziplinkfedilinkarrow-up4·1 year agoI believe it only means “I paid Microsoft to get a certificate”, so it does absolutely nothing for security.
If you have secure boot off OR don’t have a bios password you are just as insecure as this “vulnerability” would make you
So 90% of the self-proclaimed “power users”.
I feel attacked
deleted by creator
So don’t use it? How much or how little actual security secure boot provides is a topic that has been discussed to oblivion. I brought it up to make a point of how badly people are overreacting about the severity of this latest framework news.
deleted by creator
I believe it only means “I paid Microsoft to get a certificate”, so it does absolutely nothing for security.