To view parent comment, click here.
To read all comments associated with this story, please click here.
After a long hiatus, MBR based rootkits are semi-slowly starting to appear again. And the MBR is not the only time you can attack the boot sequence if BIOS-based operating systems. x64 versions of Windows have enforced driver signing, but there's plenty of time during the boot sequence before those checks are being done.
f0dder,
"After a long hiatus, MBR based rootkits are semi-slowly starting to appear again."
Your missing the key piece though, the system will have been infected through another vulnerability in the first place - secure boot does NOT fix that!!!
And in any case, we're not arguing against secure booting, that's a total red herring. We're arguing against a security feature a 3rd party holds the keys to. I don't mind that a 3rd party holds the keys by default - but to be a legitimate security feature the spec would have to provide an explicit method for the owner to take control and stop trusting microsoft/vendor.
Interesting, I can remember back ion the day when MBR viruses was all the rage but that was like 20 years ago.
An interesting question is what happens if the verification fail. Is your PC effectively bricked? Can you still boot from other media? If yes, What if you don't have any install/recovery media (increasingly common today)?





Member since:
2005-08-18
Exactly what wide-spread real-world threats does Secure Boot protect the average user from?