News for hackers. Stuff that matters.

A comment on Yet another pre-installed spyware app discovered on Lenovo computers. Parent comment

Re:Yet another pre-installed spyware app discovered on Lenov... by jamiesonbecker on Wednesday September 23, 2015 @01:54PM (#10266674)
UEFI starts with encrypted code and wraps additional layers of encrypted, signed code around it. It's impenetrable, and purposefully so. That's the practical definition of "black box". It's huge, too, with a much larger attack surface.

https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_In...

[ Parent | on HN ]
Re:Yet another pre-installed spyware app discovered on Lenov... by JoshTriplett on Wednesday September 23, 2015 @04:24PM (#10267894)
You say "encrypted" and "signed" as though that's a bad thing. When they're used against the owner of the system, sure; however, they can also be used by the owner of the system to protect themselves. "Only runs authorized code" can be a good thing as long as you're the one doing the authorizing.
[ Parent | on HN ]
Re:Yet another pre-installed spyware app discovered on Lenov... by jamiesonbecker on Wednesday September 23, 2015 @08:11PM (#10269126)
> "Only runs authorized code" can be a good thing as long as you're the one doing the authorizing.
[ Parent | on HN ]
Re:Yet another pre-installed spyware app discovered on Lenov... by jamiesonbecker on Thursday September 24, 2015 @01:20PM (#10273007)
as you're the one doing the authorizing [signing].
[ Parent | on HN ]