<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: CircleSpokes</title><link>https://news.ycombinator.com/user?id=CircleSpokes</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 08 May 2026 17:25:17 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=CircleSpokes" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>I think that would make sense yes. It isn't clear to me why they would distribute the private keys to the OEMs (laziness?).</p>
]]></description><pubDate>Sat, 06 May 2023 23:52:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=35846500</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35846500</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35846500</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>Intel gave it to MSI, but I may have been incorrect before. Apparently the keys was shared across multiple OEMs (at least that is how I read this below)<p>>The leaked private keys affect Intel’s 11th, 12th, and 13th generation processors and were distributed to various OEMs, including Intel itself, Lenovo, and Supermicro.</p>
]]></description><pubDate>Sat, 06 May 2023 22:55:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=35846105</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35846105</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35846105</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>I can't take people like you seriously. The anticheat isn't a backdoor. It doesn't ship with the operating system or come preinstalled in anyway. You opt into it when you play the game. Literally nothing is forcing you to use it or have it installed on your computer.<p>I understand this is the internet and being super dramatic is part of it but can we please be for real for one moment?</p>
]]></description><pubDate>Sat, 06 May 2023 22:51:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=35846065</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35846065</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35846065</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>>People don’t care about the anticheat on their computer, they want it foisted on everyone else who plays, which is a sucky proposition for privacy and security minded people.<p>No they want games without hackers. Which kernel based anticheats helps with. Can it also impact privacy and security? Yes no doubt but so can any program running on the computer even in userspace. Remember we are talking about kernel anticheats on windows lol.<p>If you are really worried about it you could dual boot like many people. Either way this whole argument seems silly to me.</p>
]]></description><pubDate>Sat, 06 May 2023 22:33:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=35845938</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35845938</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35845938</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>I don't think its absurd at all. It isn't required in anyway (opt in), lets you use your own keys (no preinstalled microsoft or other bigcorp keys), and isn't possible for someone to modify what keys you installed.<p>Of course if you lose your keys you can't sign anything else and that would make it basically ewaste, but most things end up as waste when you take actions that are reckless and can't be reversed (which is what losing the keys would be). Plus tech tends to ends up as ewaste after less than a decade anyways. Like sure you could still be using an AMD steamroller CPU but realistically after 10 years you'd be better off using a cheaper more power efficient chip anyways.</p>
]]></description><pubDate>Sat, 06 May 2023 20:31:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=35845121</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35845121</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35845121</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>You are correct. Secure boot is not required to play valorant on windows 10.</p>
]]></description><pubDate>Sat, 06 May 2023 20:16:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=35845005</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35845005</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35845005</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>Anyone saying secureboot "brings absolutely nothing" clearly doesn't understand how secure boot works (or is just arguing in bad faith). Secure boot has issues (see key revocation issue & vulnerable UEFI program used by malware to install bootkit) but it does address a real security issue.<p>People might not like who holds the commonly preinstalled keys (Microsoft and motherboard OEMs) but even then you can add your own keys and sign your own images if you want (there was just a post yesterday about doing this for raspberry pis),</p>
]]></description><pubDate>Sat, 06 May 2023 20:13:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=35844983</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35844983</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35844983</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>I honestly don't understand why people act like this. Wanting to be able to ensure firmware isn't maliciously modified is a good thing. Open firmware is also a good idea obviously but there has to be a way to ensure firmware is signed either by OEM or your own keys like secure boot.<p>As for games, lots of people play games and want good anticheat. If you don't like that you don't have to play those games but no need to act like the way you are because other people want decent anticheat.</p>
]]></description><pubDate>Sat, 06 May 2023 20:03:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=35844904</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35844904</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35844904</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security"]]></title><description><![CDATA[
<p>The keys are OEM specific. Intel gives them to MSI so they can sign their firmware/BIOS updates. Clearly MSI didn't handle them well.</p>
]]></description><pubDate>Sat, 06 May 2023 19:49:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=35844793</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35844793</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35844793</guid></item><item><title><![CDATA[New comment by CircleSpokes in "UEFI Secure Boot on the Raspberry Pi"]]></title><description><![CDATA[
<p>Except you can use your own keys? Nothing stops you from signing the stuff yourself (other comments in this thread link to a step by step guide!)</p>
]]></description><pubDate>Thu, 04 May 2023 18:54:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=35820355</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35820355</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35820355</guid></item><item><title><![CDATA[New comment by CircleSpokes in "faulTPM: Exposing AMD fTPMs' Deepest Secrets"]]></title><description><![CDATA[
<p>Not only do they hide it under a group policy even when you enable an "Enhanced PIN" there is a maximum length of 20.</p>
]]></description><pubDate>Tue, 02 May 2023 15:34:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=35789164</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35789164</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35789164</guid></item><item><title><![CDATA[New comment by CircleSpokes in "faulTPM: Exposing AMD fTPMs' Deepest Secrets"]]></title><description><![CDATA[
<p>It can work yes but AMD chips didn't get GMET until Zen2 so if you leave virtualization based protection on you might see a performance hit.<p>From Microsoft's website:<p>>Memory integrity works better with Intel Kabylake and higher processors with Mode-Based Execution Control, and AMD Zen 2 and higher processors with Guest Mode Execute Trap capabilities. Older processors rely on an emulation of these features, called Restricted User Mode, and will have a bigger impact on performance.<p><a href="https://learn.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity" rel="nofollow">https://learn.microsoft.com/en-us/windows/security/threat-pr...</a></p>
]]></description><pubDate>Tue, 02 May 2023 15:03:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=35788568</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35788568</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35788568</guid></item><item><title><![CDATA[New comment by CircleSpokes in "faulTPM: Exposing AMD fTPMs' Deepest Secrets"]]></title><description><![CDATA[
<p>IIRC it has more to do with that series of chip not having GMET (AMD Guest-Mode Execute Trap for NPT) which is used in Windows 10/11s virtualization based protection. Microsoft requires this option for all new PCs from their partners but you can install windows 11 and run it fine without this CPU feature (there is a performance hit if you leave virtualization based protection on though since it has to be done in software).</p>
]]></description><pubDate>Tue, 02 May 2023 15:01:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=35788532</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35788532</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35788532</guid></item><item><title><![CDATA[New comment by CircleSpokes in "New York to ban natural gas, including stoves, in new buildings"]]></title><description><![CDATA[
<p>>Berkeley attempted this and it was recently overturned: <a href="https://www.cbsnews.com/news/court-overturns-berkeley-califo" rel="nofollow">https://www.cbsnews.com/news/court-overturns-berkeley-califo</a>...<p>There is a legal difference between a state banning it and a city. States have far more powers that cities don't (unless the state delegates that power which they often do)</p>
]]></description><pubDate>Sat, 29 Apr 2023 18:27:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=35755656</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35755656</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35755656</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Statement on EU-US Cooperation on Turning Public Opinion Against Encryption"]]></title><description><![CDATA[
<p>> If people are not allowed to transfer money anonymously, why allow them communicate anonymously?<p>You can do that in the US though with cash. There might be some transactions that you can't do in physical cash but that is more of a practical/convince limitation and not a legal one.</p>
]]></description><pubDate>Mon, 24 Apr 2023 17:45:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=35690787</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35690787</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35690787</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Tech bosses are letting dictators censor what Americans see"]]></title><description><![CDATA[
<p>Acting on behalf of adversarial governments is fine too if you register with the government. In the case linked above they didn't do that and conspired to keep the fact they took orders from Moscow hidden.</p>
]]></description><pubDate>Fri, 21 Apr 2023 21:50:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=35660701</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35660701</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35660701</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Seagate hit with $300M penalty for selling sanctioned storage to Huawei"]]></title><description><![CDATA[
<p>Except people get arrested for sanction busting somewhat frequently..</p>
]]></description><pubDate>Thu, 20 Apr 2023 17:21:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=35643194</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35643194</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35643194</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Mach 3.5 Over Libya in an SR-71 Blackbird"]]></title><description><![CDATA[
<p>>Oh, so your advice is to blindly trust whatever they shovel into the public's mouths ?<p>Are you being serious? By this time in history Libya had already established a history for terror attacks and targeting civilians. So yeah I wouldn't have any issue believing it.<p>Just like when the UK blamed Russia for poising people Salisbury with chemical weapons. I believed them because they had intelligence about it & Russia has a history with this type of attack. Just like Libya already had a proven history of terror attacks in the 80s.<p>It is beyond silly to think a false flag bombing (injuring 250+ friendly nationals) is more likely than LIBYA, a know rouge state and user of terrorism, bombing a civilian dance club.<p>You and others are more than happy to bury your heads in the sand and pretend like the world is a TV show where countries post all their intelligence to twitter or in the paper lol.</p>
]]></description><pubDate>Fri, 31 Mar 2023 02:10:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=35381543</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35381543</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35381543</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Mach 3.5 Over Libya in an SR-71 Blackbird"]]></title><description><![CDATA[
<p>Because real life isn't a TV show. That isn't how national security agencies work. They don't dump raw intelligence to the public. The US knew it was Libya obviously, and the data released since then has proved that. Hell even the Stasi & the soviets knew it was Libya.<p>Again this isn't a TV show. No country needs permission to react to an attack against them by another state like Libya.</p>
]]></description><pubDate>Thu, 30 Mar 2023 19:30:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=35377749</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35377749</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35377749</guid></item><item><title><![CDATA[New comment by CircleSpokes in "Mach 3.5 Over Libya in an SR-71 Blackbird"]]></title><description><![CDATA[
<p>What a ridiculous thing to say. Do you think the Libyan intelligence service gets to bomb dance clubs and then cry sovereignty when someone bombs some military targets in Libya? I don't know if you are ignorant of the situation or if you truly believe a country cannot retaliate against an attack against their citizens and allies. (This story and the bombing campaigned being photographed by the SR71 was a direct response to the West Berlin discotheque bombing in 1986).<p>>The entire world is truly their own backyard!<p>Yes..? If you are a state actor like Libya and you attack other nations civilians to cause terror then they have the right to attack you back. The US bombing Gaddafi's compounds and some other military targets in Libya was 100% justified. To act like a country can't retaliate in such a situation is honestly childish.</p>
]]></description><pubDate>Thu, 30 Mar 2023 18:11:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=35376828</link><dc:creator>CircleSpokes</dc:creator><comments>https://news.ycombinator.com/item?id=35376828</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35376828</guid></item></channel></rss>