Tech News Major secure boot blunder affects up to 500 devices from almost all manufacturers

Reusing the same public cryptographic keys that were leaked is having a major security impact on many manufacturers

[BenEngel]

Thanks for the heads up @WCT and please continue to follow this issue. Like to hear or read more about it; any tips?

[FermiToll]

For what i had seen in news now and then, all those things, BitLocker Secure Boot, not to talk for the mayor issue of cloud strike, causes more issues than the thing they prevent.

[D.von.N]

Cryptokey preventing access to BIOS. Unless, in some instances, the motherboard comes with a sleeping image that cannot be easily detected by any antimalware. It evades all major scans and will get into action before the booting process. Watched a video about this a few months back. It really is very important that our stuff is made by trustable businesses and their staff vetted properly.

[bulldata]

Forces you to use the Windows key & R plus typing MRT and full scan each time you boot-up.

[Thesassydude]

Is it important to update the BIOS of the computer when an update is available especially after what you’ve said in this video?

[D.von.N]

On the side note: Where is the HP Surestart sanding in this issue? Is it also affected or completely separate from the risk? It has an encrypted copy of the BIOS if I understand it right and it is able to heal it if it detects changes. that before booting the whole system.

[davinp]

Remember that Windows 11 requires secure boot

[VanessinhaPucca]

I own a Gigabyte mobo, not a real cheap one too... yeyyyy :(

[IceColdViking]

yeah well what if the motherboard is not getting anymore updates it is not like everyone can just go out and buy a new motherboard not everyone can afford that

[kensmith]

Relax. It is less of an issue that people are claiming. The problem with "secure boot" can only be an issue if either some other weakness lets a virus onto the computer or physical security (you keeping the machine) gets violated. The issue allows an OS other than the ones the maker allowed for boot on the machine. This is really not a likely issue. If someone finds a way to get a virus in, they don't need to do anything with secure boot.
For almost all users, the secure boot issue is a non-issue.

[tyeadel]

QA testing is rushed because of cost and time constraints. Management can be very short sighted.

[stephenlawlor]

I haven't noticed anything like that on my pc. Not Yet Anyway!?!

[wildbill]

ACER is the bottom of the barrel for PC's and Laptop's anyways..

[Matt]

In My eyes, its when the user should be allowed to use any form of a key, to have it set by MS only and even yea by Gov only, is The Problem. Should really be any form of a key, so that way more diversity, still has to crypto-logic of course, but known to the user of the computer. We buy the damn thing didn't we. We need the access. If I sound like i hate MS, yes, I do.

[bassplayer]

I'm sure all of this is due to some DEI hire.