Windows 8 Secure Boot maybe not so secure now (hard drive, operating system, bios)

[linicx]

At the upcoming MalCon security conference in Mumbai, Austrian independent developer and security analyst Peter Kleissner is scheduled to release the first known "bootkit" for Windows 8—an exploit that is able to load from a hard drive's master boot record and reside in memory all the way through the startup of the operating system, providing root access to the system.

The details of the Windows 8 bootkit have not yet been shared, but Kleissner said in his Twitter feed this morning that the new bootkit, called Stoned Lite, has an infector file that is only 14 kilobytes in size, and the bootkit can be started from a USB drive or CD.


Security Researcher Defeats Windows 8 Secure Boot - Security | DSLReports Forums

[Skunk Workz]

Seems to be much ado about nothing.

It actually works against the BIOS not UEFI, in which case it's not defeating Secure Boot, since Secure Boot requires UEFI.

It actually reenforces the need for SB to exists; this very exploit doesn't work if SB is enabled via UEFI.