| |||||||||||||
LSS: Secure BootLSS: Secure BootPosted Sep 24, 2012 9:07 UTC (Mon) by hummassa (subscriber, #307)In reply to: LSS: Secure Boot by mjg59 Parent article: LSS: Secure Boot
> Now, to be fair, part of that's because vendor keys have been easier to get hold of
No, that's not "part of that". s/part of //. The security process stops at the easier way to the threat to get what he wants. Threats can and will leak keys from Microsoft (remember NT4/XP source code?) if that's the easier way of signing device drivers. As vendor keys are currently easier to get hold of, and they do the job just fine (because there are a lot of vendors and IIRC once the keys were revoked another version of Stuxnet signed with another key popped up) the threats don't need to go after MS.
Security = you don't have to outrun the beast, you have to outrun the friend beside you.
(Log in to post comments)
|
|||||||||||||