News for hackers. Stuff that matters.

A comment on How Windows 10 Rewrites OS Architecture: Battle of SKM and IUM [pdf]. Parent comment

Re:How Windows 10 Rewrites OS Architecture: Battle of SKM an... by mjg59 on Friday October 23, 2015 @04:11PM (#10441029)
You can never really trust a system's assertion about its Secure Boot state, so refusing to run when Secure Boot appears to be disabled would be more of a feel-good approach than anything else. You really need a measured boot process here, and if you have that then Secure Boot's not buying you a great deal in this case.
[ Parent | on HN ]
Re:How Windows 10 Rewrites OS Architecture: Battle of SKM an... by ossreality on Friday October 23, 2015 @05:10PM (#10441320)
Don't you need SecureBoot to start the process of the measured boot?
[ Parent | on HN ]
Re:How Windows 10 Rewrites OS Architecture: Battle of SKM an... by mjg59 on Saturday October 24, 2015 @02:53AM (#10442728)
No, Secure Boot only comes into play at the point where the firmware starts executing external code (option ROMs or bootloaders). You need to start measurement way before that.
[ Parent | on HN ]