Products > Security

MSI screwed up Secure Boot default setting for >290 mainboards

(1/2) > >>

madires:
MSI accidentally breaks Secure Boot for hundreds of motherboards: https://www.bleepingcomputer.com/news/security/msi-accidentally-breaks-secure-boot-for-hundreds-of-motherboards/

magic:
Meh, just changed the default settings.
Reminder to always review all relevant BIOS settings before assuming that something will work :P

Infraviolet:
Sounds good news to me. If one is relying on "secureboot" to keep one "secure", then one's OS has already been hacked in practice and a hacker can access any files and modify any system settings as if they were the system's highest level of administrator. Secureboot is a line of "defence" which is behind all the things you want to protect, the only thing it is about securing is M$'s monopoly against competitor operating systems. I'd be much happier with a PC that doesn't secure boot by default (because this so-called screw-up was just a default setting not even a total inability to do it) or doesn't have secureboot at all, than with one which has a locked secureboot (which M$ seems to be working towards with the Pluton SoC concept) forcing users in to the Windows stockade.

Siwastaja:
"Over 290 MSI motherboards are reportedly affected by an insecure default UEFI Secure Boot setting settings that allows any operating system image to run regardless of whether it has a wrong or missing signature."

So they accidentally supplied a working firmware, bypassing Microsoft's bullcrap, which never had anything to do with security despite the name? What a pity.

DimitriP:

--- Quote from: Siwastaja on March 02, 2023, 07:25:18 am ---"Over 290 MSI motherboards are reportedly affected by an insecure default UEFI Secure Boot setting settings that allows any operating system image to run regardless of whether it has a wrong or missing signature."

So they accidentally supplied a working firmware, bypassing Microsoft's bullcrap, which never had anything to do with security despite the name? What a pity.

--- End quote ---
They "accidentally" made it work with "any" operating system.
If I were MSI I would be accident-prone too :)

Navigation

[0] Message Index

[#] Next page