Microsoft's Secure Boot has been broken for a decade and no one noticed

Microsoft's Secure Boot has been broken for a decade and no one noticed(arstechnica.com)

8 points by Gaishan 7 hours ago | 3 comments

gnabgib 7 hours ago |

Pay the researcher some credit and submit the original source: https://www.welivesecurity.com/en/eset-research/forgotten-ue...

pseudohadamard 3 hours ago |

So your must-have-TPM2.0-or-we-won't-allow-Windows-to-run laptop has had all the security of Windows 95 throughout its life.

"Thank Microsoft, kids! / Thaaaanks, Satya!".

dlcarrier 1 hour ago | |

TPM and BitLocker have always been security theater, by design. Anything actually secure would be inconvenient, so security theater offers all of the benefits of looking like you're doing something, without the inconvenience of actually doing anything.

See also: the TSA, regulations against holding a cell phone while driving, land acknowledgements, and most health care advice.