day "-x" Win8 UEFI vulnerability

[John Kotches]

An Italian security group reports that Windows bootloader is insecure in its current form. This is what I am calling a day "-x" bug as the OS has not officially been released to the public. It's supposed to be RFM (released to manufacturing) as of last week though.

This is the source page from UK journal The Register.

Interesting stuff.

Sent from my Transformer Prime TF201 using Tapatalk 2

 

[LER]

Yuk. Not what you want to see. Nice write up (both this article and the one pointed to it by it).

Thanks (I think ) for posting John.

 

[John Kotches]

I'm hoping that MS has a day of launch patch for this vulnerability. Whether or not they do remains to be seen.