this post was submitted on 15 Jul 2026
155 points (98.1% liked)

Technology

86362 readers
3163 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
155
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now (www.welivesecurity.com)
submitted 15 hours ago by beep@piefed.world to c/technology@lemmy.world
36 comments fedilink hide all child comments
 

cross-posted from: https://piefed.world/c/tech/p/1263218/microsofts-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until-now

you are viewing a single comment's thread
view the rest of the comments
[–] A_norny_mousse@piefed.zip 22 points 12 hours ago (2 children)

11 old and forgotten UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party UEFI certificate authority (CA) certificate, regardless of the installed operating system (OS).

This "Trust" is one of my pet peeves. It's $$$.

[–] naticus@lemmy.world 13 points 12 hours ago (1 children)

I get why you'd dislike that wording, but this is also how all certificate stores work, regardless of whether we're talking Secure Boot, Windows or Linux. Gotta trust the top level as providing legitimate certificates to then trust everything underlying as coming from the correct parties.

Certificate are something I work with constantly at work and I fucking hate resolving issues with them lol.

[–] A_norny_mousse@piefed.zip 12 points 12 hours ago

I get why you’d dislike that wording

It's not just the wording.

this is also how all certificate stores work

Precisely.

Check out cacert.org and why it never gained "Trust". Hint: $$$

[–] JiveTurkey@lemmy.world 2 points 12 hours ago (1 children)

Add this to the pile of reasons why M$ is a joke and people should stop using them. Nothing they make is so good that you need to stick around.

[–] orclev@lemmy.world 4 points 10 hours ago* (last edited 10 hours ago)

MS has mastered the one thing businesses love which is being perfectly mediocre. If you present a business two pieces of software one that does one thing really well but nothing else, and one that does three things terribly, they'll pick the one that does three things terribly every time. That's the MS design, it smears a thin coating of suck across as broad a surface as possible and then advertises that it does everything.