LSS: Secure Boot

It seems to me such an attacker could introduce an image that "looks" good during tests but is in fact compromised, or even subvert the verification process itself. And even if it does mean they have to take the extra step of attacking the firmware provisioning, this indicates to me its going to be extremely difficult to stop a determined attacker (as is often the case in security).

So at the end of the day, it may help deter attacks, but it remains to be seen whether its worth the extra hassle.