Advice on a new PC motherboard 'bundle' Featured

"Millions of PC Motherboards Were Sold With a Firmware Backdoor

› hardware › comments › millions_of_pc_motherboards_... May 31, 2023 · Most, if not all, motherboard manufacturers appear to be really bad at security... <=== There have been multiple incidents, that's where " this idea comes from.

Here's an example for you.

Normally, signing services are air gapped and "you have to go into this little room, to sign something". You don't leave any sort of important keys, on the general company LAN or WAN.

when the Linux shims for booting were last signed (to handle the situation where Microsoft revoked an important key in UEFI and it took Microsoft a year to push out that change into hardware), they fly to specific places for the air-gapped signing ceremony. The signing cannot be conducted by just emailing the materials to the party doing the signing, and having them emailed back. It requires a person to physically travel to the little room, to get the signing done. They hand the goods to a trusted employee who enters the room and signs the item, then it is handed back to the traveller who flies home. The item stays in hand until they get home (can't be left in the luggage during the plane flight).

That's how responsible parties do security.

Paul