|
Authored by: Anonymous on Thursday, July 05 2012 @ 07:36 PM EDT |
Common sense suggests that UEFI firmware won't be modifiable by anything not
signed by either predefined keys or the keys used for secure boot. Now there's
no guarentee that anyone in this whole mess has any common sense, but think
about what would happen if that wasn't the case - the whole excercise would be
pointless and would offer zero security/lockin/drm/whatever you think the motive
is.
If you're suggesting vendors will screw it up sure, I agree - that's almost
certainly going to happen. As for attack surface, that's true to a point as
well. UEFI is ridiculously bloated, but this is missing something - if you're
in a position to attack UEFI on a secure boot system, wouldn't you have already
owned a BIOS based system since there's pretty much zero protection?
How does windows do chmod? Uh, icacls from the command line or the security
properties tab in the GUI, for what that's worth.[ Reply to This | Parent | # ]
|
- I reckon so... - Authored by: Anonymous on Thursday, July 05 2012 @ 10:41 PM EDT
|
|
|
|