Microsoft's Secure Boot has been broken for a decade and no one noticed

arstechnica.com

12 pointsGaishan3 comments

Pay the researcher some credit and submit the original source: https://www.welivesecurity.com/en/eset-research/forgotten-ue...

So your must-have-TPM2.0-or-we-won't-allow-Windows-to-run laptop has had all the security of Windows 95 throughout its life.

"Thank Microsoft, kids! / Thaaaanks, Satya!".

TPM and BitLocker have always been security theater, by design. Anything actually secure would be inconvenient, so security theater offers all of the benefits of looking like you're doing something, without the inconvenience of actually doing anything.

See also: the TSA, regulations against holding a cell phone while driving, land acknowledgements, and most health care advice.

Reply on news.ycombinator.com