News for hackers. Stuff that matters.

A comment on Lennart Poettering, Christian Brauner founded a new company. Parent comment

Re:Lennart Poettering, Christian Brauner founded a new company by hsbauauvhabzb on Wednesday January 28, 2026 @12:54AM (#46791578)
If a malicious update can be pushed because of some failure in the signature verification checks (which already exist), what makes you think the threat actor won’t have access to signing keys?

This is not what attestation is even seeking to solve.

[ Parent | on HN ]
Re:Lennart Poettering, Christian Brauner founded a new company by avadodin on Wednesday January 28, 2026 @06:31PM (#46803309)
Firmware upgrades don't need to use the same protocols. Without secure boot any applet can take a security hole escalate and persist until you take a trip to a zone of interest. With secure-boot+attestation, the vendors can choose not to let you download the latest map data, report you to the authorities, etc.

Why do people take DA as "Hail Satan" anyways.

[ Parent | on HN ]
Re:Lennart Poettering, Christian Brauner founded a new company by hsbauauvhabzb on Thursday January 29, 2026 @03:23AM (#46807273)
If this was about stopping malware, it wouldn’t be targeting Linux endpoints.
[ Parent | on HN ]
Re:Lennart Poettering, Christian Brauner founded a new company by cwillu on Thursday January 29, 2026 @08:15AM (#46809798)
“With secure-boot+attestation, the vendors can choose not to let you download the latest map data, report you to the authorities”

As far as I'm concerned, you just conceded the argument.

[ Parent | on HN ]