Re:MSI firmware signing keys leaked
by charcircuit on Saturday May 06, 2023 @07:37AM
(#35840310)
Yes, because it's selfish and potentially shortsighted. Malware can now be developed and secure boot can no longer be trusted on these motherboards. To ensure security everyone will need to go out and buy a new motherboard. Unfortunately, the most likely outcome is people will continue to use vulnerable motherboards and some of them will get malicious firmware images on them. Eventually some of these infected motherboards will be sold to unknowing buyers and then there system will be compromised too.
[ Parent
| on HN ]
Re:MSI firmware signing keys leaked
by solarkraft on Saturday May 06, 2023 @07:45AM
(#35840357)
I'd be happy about security features if they weren't used against me.
Re:MSI firmware signing keys leaked
by charcircuit on Saturday May 06, 2023 @07:47AM
(#35840377)
Making the hardware you bought secure is the opposite of it being used against you.
Me doing whatever I want with stuff I bought is the definition of ownership.
I'm starting to think that these sort of "CVE bro" posts are part of an intentional campaign by manufacturers trying to hold on to their rent seeking scheme.
Re:MSI firmware signing keys leaked
by charcircuit on Saturday May 06, 2023 @02:25PM
(#35843973)
The big issue is that there is not a good way for the hardware to tell that the you are the owner and not an attacker.
Re:MSI firmware signing keys leaked
by KyeRussell on Sunday May 07, 2023 @12:40AM
(#35847991)
This is just absurd, dishonest, overly emotive language, built upon sand of the parent argument that people even care about this in the first place.
You aren’t a farmer and your crappy MSI consumer hardware isn’t a tractor.
Re:MSI firmware signing keys leaked
by TheNewsIsHere on Saturday May 06, 2023 @08:30AM
(#35840714)
I don’t agree with that framing.
You can absolutely hide behind security to justify actions that are hostile to users. Companies do it _all the time_.
There is room for both of these to be true.
I am not interested in securing my hardware again changes I want to make.
please tell us what changes you would like to make.
Re:MSI firmware signing keys leaked
by charcircuit on Saturday May 06, 2023 @02:27PM
(#35843985)
There is likely a way to do that in a secure way. Such as the firmware providing a menu that lets you configure different things.
Can't you enroll your own keys?
Re:MSI firmware signing keys leaked
by charcircuit on Saturday May 06, 2023 @07:52AM
(#35840417)
Enrolling keys doesn't make secure boot insecure.
Re:MSI firmware signing keys leaked
by dawidpotocki on Saturday May 06, 2023 @07:56AM
(#35840441)
Secure Boot was already very broken on these boards. By default it does nothing and even if you change settings so that it actually does validation, it should be possible to reset it back from the OS by updating the firmware from the OS as there are no locks for the firmware region.