Microsoft Secure Boot Bypass Is the Backdoor Government Always Wanted

Two security researchers MY123 and Slipstream have discovered and helped Microsoft fix a security flaw that allowed attackers to bypass the Secure Boot system that protects devices booting Windows operating systems.

According to Microsoft's description, Secure Boot is a security protocol developed together with members of the PC industry that's automatically included in the UEFI firmware that helps your computer, laptop, or smartphone through the boot-up process.

Secure Boot was created to fight bootkits, a type of malware that alters the boot-up process, and its role is to prevent tampering of the files loaded during the boot-up.

Microsoft itself added the problematic code

MY123 and Slipstream discovered that after Windows 10 v1607 Redstone, Microsoft added a new type of Secure Boot policy, called "supplemental" policies.

The two claim that one of these supplemental policies can be used to disable a Secure Boot feature that checks if the files ...