Privacy News Researchers crack Microsoft feature, say encryption backdoors similarly crackable

[SHvFl]

Researchers who uncovered a security key that protects Windows devices as they boot up say their discovery is proof that encryption backdoors do not work.

The pair of researchers, credited by their hacker nicknames MY123 and Slipstream, found the cryptographic key protecting a feature called Secure Boot.

They believe the discovery highlights a problem with requests law enforcement officials have made for technology companies to provide police with some form of access to otherwise virtually unbreakable encryption that might be used by criminals.

Read the full article:
Researchers crack Microsoft feature, say encryption backdoors similarly crackable

 

[DardiM]

Thanks for the share

A good example that show that if targeted, what seems to be good protections, can be defeated

 

[Exterminator]

Microsoft Secure Boot Bypass Is the Backdoor Government Always Wanted

 

[hjlbx]

LOL... it makes no sense to keep Secure Boot enabled if it causing problems on your system.

Now that the Secure Boot key is open source, it is just a matter of time before rootkits rise to preeminence once again. Someone will figure out a way where direct physical access is not needed.

This is a really bad one... if agents show up to your house while you are out shopping...

 

[Solarquest]

...
--Update August 11, 3:34 p.m.

Microsoft responded to the story with a statement emphasizing that, as a security vulnerability, this only affects a limited number of devices.

“The jailbreak technique described in the researchers’ report on August 10 does not apply to desktop or enterprise PC systems. It requires physical access and administrator rights to ARM and RT devices [respectively a class of processor used in mobile devices and product line of Surface tablets] and does not compromise encryption protections,” a company spokesperson said.