Microsoft "Accidentally" Leaks Backdoor Keys to Bypass

https://thehackernews.com/2016/08/uefi-secure-boot-hack.html

http://www.theregister.co.uk/2016/08/10/microsoft_secure_boot_ms16_100/

The only thing secure boot does is prevent unsigned OSes from running. The option could be disabled in the UEFI previously at least on laptops and desktops but now with this leak it can also be defeated even if it's not disabled. This is kinda a win but also a loss in a way because while it opens up tablets and other previously anti-consumer devices it also potentially exposes all devices that supported secure boot to malware.

>>56021333
So it's basically going back to plain old BIOS at this point? I don't see how it's a loss.

>>56021264
This is good news forwindows phone and surfaceRT owners, as linux/android will be finally possible to run on their hardware

>>56021431
No, only going back to normal UEFI

>>56021264
All this does is give you freedom for hardware that you paid for. Secure boot doesn't protect your disk drives. If the government really wanted to see the contents of your hard drive they'd just remove the hard drive, clone it and view it from there.

>>56021264
Fucking Microsoft and the prajeet staff, should've never trusted you to begin with

>>56021264
>Something happened
Something happened

File: FB_IMG_1470809212630.jpg (13KB, 507x290px) Image search: [Google]

13KB, 507x290px

>>56021473
What's better? BIOS or UEFI??

>>56021646
UEFI should be better, but it's much more locked down than a traditional BIOS

>>56021431
The main problem is the abundance of hardware which supports virtualization compared to back then.

If someone takes advantage of hardware based virtualization they can create a hypervisor that can be used to snoop on an unsuspecting user. It's like a MITM attack but you're in the middle of the user and their own hardware. Could be used to steal credentials for websites or other things that would normally resist ransomware.

>backdoor to secure boot
i fail to see how this could ever possibly be anything but fantastic.

until somebody tells me how to put a different os on my Wangblows phone i'm calling bullshit

File: http _i.imgur.com_UY4VNfr.jpg (137KB, 1200x1600px) Image search: [Google]

137KB, 1200x1600px

>>56021911

>>56021264
Micropoo on suicide watch

>>56022096
But why?

>>56021861
That was my first thought.

>>56021646
libre/coreboot

Everytime someone comes into my store with a failing hdd, or corrupt boot, i can disable secure boot, liveusb it, and see all of their data anyways. I dont see what safety it adds really...

>>56022754
Some devices don't let you disable it any more.

>>56021485
unless the drive is encrypted

>>56022754
secure boot is meant to prevent booting "untrusted" software. Most computers are factory provisioned with the MS public keys so they will only boot software signed by Microsoft(of course, only if Secure boot is enabled). Some systems can also be set with your own keys, something useful in corporate environments.

If you don't want anyone to access your data you should encrypt your drive and keep the keys inside something secure(like a TPM).

But this is good news, OP. It means that people can remove the microsoft cancer from UEFI devices

>>56022833
Ah, thabks for the clarification.
So it is just to stop year of the linux from actually happening then.

>>56021333

This. It's just a malware bootkit enabler. It's not a Bitlocker backdoor or some kind of remote code execution hole.

>>56021264
>accidentally

How did they "accidentally leak it"?

>>56022890

Here you go

https://rol.im/securegoldenkeyboot/

tl;dr they made some really dumb policy changes and didn't change them back before RTM stage

>>56021264
Is this how uefi cancer ends? How is microPOO reacting to this?

>>56021646
Open Firmware

File: screencapture-www-cvedetails-com-top-50-vendor-cvssscore-distribution-php-1456174069877.png (504KB, 1366x1391px) Image search: [Google]

504KB, 1366x1391px

>>56021264
What else can you expect from Micropajeet?

>>56022997
>https://rol.im/securegoldenkeyboot/

My god! I'm back in the 80s demoscene

File: 1256814429102.jpg (28KB, 600x450px) Image search: [Google]

28KB, 600x450px

>>56021264
>MFW PAJEETS INCOMPETENCE WILL BE MS DOOM

>>56022997
AYY LMAO

File: 4L_2Ol0Wtmf.jpg (6KB, 275x183px) Image search: [Google]

6KB, 275x183px

>>56021264
>not using MBR

>>56022096
That was from before the keys leaked

>>56024827
> on Surface RT
They already chose this shit for you.

>>56024827
Some devices come with UEFI locked and Microshit fucked up

They should get sued

Okay, so whats the password/key?
I can log into every app with it right?
Shit, I am so going to hack every comp at my school.

>>56024894
>Shit, I am so going to hack every comp at my school.
You'll forgive us if we don't come to visit you in fuck-in-the-ass federal prison.

>>56024464
>Microsoft, Adobe, and Mozilla
Pajeets, hipsters, and SJWs
Is there a connection between these three groups? Why are these three groups the worst coders?

>>56021449
>android on my 640
Fuck yeah.

>>56021911
>>56024856
I know

https://rol.im/securegoldenkeyboot/

>>56021264
>implying these keys werent made for FBI, and NSA.

PRISM people.. REMEMBER PRISM

>However, the Golden Keys disclosed by two security researchers [...] can be used to install non-Windows operating systems, say GNU/Linux or Android, on the devices protected by Secure Boot.
HAHAHAHAHAHAHA

>>56026965
They were made for developing. I bet the agencies have their own keys

Will it unlock WP7 phones?

>>56026965
This

>>56026898
BRING BACK THE DEMOSCENE
;___;7

>>56021264
Good, this will ensure the pedos of 4chan go to jail where they belong.

>>56027364
pouet.net

>>56022670
If only it supported a wider range of hardware.

>>56026505
>adobe
>Not pajeets

>>56027002
>can be used to install non-Windows operating systems, say GNU/Linux
Gentoo on tablets when

>>56027458
hopefully raped with aids.
fuck i hate pedos.

>>56027609
Right now?

>all this hate towards masterrace windows
>rather run osx on their computers.
Seriously, /g/ is fucking dead.

how do I turn it off?

>>56027609
Just get an x86 tablet and install it

>>56027705
>Buttmad wincuckold hard on damage control
Your tears are delicious

>>56027705
LOL
>he didn't realize shills and fanboyfaggots took over /g years and years ago
srsly, the front page is spammed with the exact same shitty fucking threads all fucking day every fucking day.

I wonder if you could install OSX on a windows tablet. It would be like an ipad but with an actual build of OSX running on it.

>>56027744
>>56027749
>iFags on full damage control
Nice try iPajeets.

>>56027767
That will take iFags to the new level of butthurt.

File: 1468536890805.png (661KB, 1366x768px) Image search: [Google]

661KB, 1366x768px

>>56027773
Rakesh pls go to your street

>>56021646

UEFI protects the hand off from the boot to the operating system. I theory it should be better. In reality its most shitting things up and being attacked at the bios was rare as fuck anyways.

>>56027810
>iTard loses argument
>Oh, I know! Let's just call them a rakesh in a last ditch attempt to redeem Apple's image on /g/
Nice try, it's not going to work iPajeet.

File: 1461872613297.jpg (97KB, 433x419px) Image search: [Google]

97KB, 433x419px

>>56027865
>Actually admitting to be rakesh
>Literal shitskin thinking he was even arguing

File: 1469476975738.jpg (13KB, 224x216px) Image search: [Google]

13KB, 224x216px

>>56027921
I don't want to look like an SJW faggot, but you're a racist.

>>56024894
It doesn't work like that, go fuck yourself

>>56027609
Gentooblet how?

>>56027921
the number of pasty IT cucks with inferiority complexes on this board is getting out of hand

>>56027609
just install linuxdeploy on your android tablet

>>56027705
in what parallel world do you live?

>>56021663
>not running everything in a VM which has virtualization disabled.

>>56021264
>potentially giving law enforcement (such as FBI and NSA) special backdoor that can be used to unlock Windows-powered devices in criminal cases.
They already had this key, or at least could have easily obtained it with a subpoena.

>allowing the feds to capture your hardware in working conditions

>>56021264
My PC is not connected to the internet and I am not stashing CP. Why would I care?

File: 204635.png (45KB, 600x600px) Image search: [Google]

45KB, 600x600px

>>56021264
Yeah well your father "leaked" semen in to his sister and made you but you don't see me making shitty threads asking for you to be banished from /g/.

>>56021646
BIOS

it just works, and it's suckless

>>56033096
>BIOS just works
re
>BIOS is suckless
tard

>>56032985
Why aren't you connected?

>>56033123
Why is Pale Moon a meme :(

>>56033201
I don't know

File: edward elizabeth hitler.gif (329KB, 300x225px) Image search: [Google]

329KB, 300x225px

>>56027810
nutella looks like a brown adrian edmonson

>>56027571
Actually they are mostly mormon

>>56022997
Is there a more readable version somewhere? Totally shits up my phone

>>56028093
Fuck off pajeet

>>56028093
You're an SJW faggot if the words "you're a racist" ever leaves your mouth you bitch ass punk. Can't wait for Trump to deport your poo in loo mouth back to Shitndia.

In my BIOS i turned off secure boot, so i dont even care.

>>56034473
>secure boot
>bios
kek

File: photo-2[1].jpg (891KB, 1632x1224px) Image search: [Google]

891KB, 1632x1224px

>>56034728
????

>>56034768
Secure Boot uses UEFI not BIOS.

>use uefi and secure boot
>archlinux installed and runs fine out of the box

huh.

File: 1455191865903.jpg (34KB, 338x305px) Image search: [Google]

34KB, 338x305px

>>56033938
>>56034419
>Responding to obvious bait

Why is there people saying this could allow android on lumias?
Am i missing something?