xavier666@lemmy.umucat.day to Linux@lemmy.mlEnglish · 1 year agoBombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterpriseeclypsium.comexternal-linkmessage-square43fedilinkarrow-up1135arrow-down138cross-posted to: linux@programming.dev
arrow-up197arrow-down1external-linkBombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterpriseeclypsium.comxavier666@lemmy.umucat.day to Linux@lemmy.mlEnglish · 1 year agomessage-square43fedilinkcross-posted to: linux@programming.dev
minus-squareferret@sh.itjust.workslinkfedilinkEnglisharrow-up4·1 year agoSo don’t use it? How much or how little actual security secure boot provides is a topic that has been discussed to oblivion. I brought it up to make a point of how badly people are overreacting about the severity of this latest framework news.
minus-squareWFH@lemmy.ziplinkfedilinkarrow-up4·1 year agoI believe it only means “I paid Microsoft to get a certificate”, so it does absolutely nothing for security.
So don’t use it? How much or how little actual security secure boot provides is a topic that has been discussed to oblivion. I brought it up to make a point of how badly people are overreacting about the severity of this latest framework news.
deleted by creator
I believe it only means “I paid Microsoft to get a certificate”, so it does absolutely nothing for security.