Get the latest tech news
Secure Boot is broken on 200 models from 5 big device makers
Keys were labeled "DO NOT TRUST." Nearly 500 device models use them anyway.
ICLord was a rootkit, a class of malware that gains and maintains stealthy root access by subverting key protections built into the operating system. Built into UEFI—the Unified Extensible Firmware Interface that would become the successor to BIOS—Secure Boot used public-key cryptography to block the loading of any code that wasn’t signed with a pre-approved digital signature. The encrypted file, however, was protected by a four-character password, a decision that made it trivial for Binarly, and anyone else with even a passing curiosity, to crack the passcode and retrieve the corresponding plain text.
Or read this on Hacker News
