Posted Jun 2, 2012 13:58 UTC (Sat) by spaetz (subscriber, #32870)
[Link]
> So what happens when Microsofts private key is leaked?
Ahh, finally a useful use for distributed.net and their cracking tasks :-)
Implementing UEFI Secure Boot in Fedora
Posted Jun 4, 2012 4:47 UTC (Mon) by raven667 (subscriber, #5198)
[Link]
That seems pretty unlikely unless they are completely incompetent in handling the keys, the security requirements around a major CA are tedious but not rocket science.
Implementing UEFI Secure Boot in Fedora
Posted Jun 4, 2012 9:59 UTC (Mon) by dgm (subscriber, #49227)
[Link]
In tedium lies human error. That's why we use machines for repetitive tasks.
Implementing UEFI Secure Boot in Fedora
Posted Jun 4, 2012 12:49 UTC (Mon) by nix (subscriber, #2304)
[Link]
Didn't they just revoke two signing keys which were apparently leaked(?) and used to sign the Flame malware?
Implementing UEFI Secure Boot in Fedora
Posted Jun 4, 2012 14:35 UTC (Mon) by hummassa (subscriber, #307)
[Link]
How much time do you think it will take for Flame's creators to re-sign it with another "leaked" key?
Implementing UEFI Secure Boot in Fedora
Posted Jun 4, 2012 18:13 UTC (Mon) by nix (subscriber, #2304)
[Link]
They probably already had a resigned version ready to go, so, negative time.