This means I can file a CVE for every single iOS and Android device now, right? "Secure boot can be bypassed with a FIB workstation to gain full root access" People applying for dumb meaningless CVEs outside reasonable threat models just make the security industry look bad.https://twitter.com/erincandescent/status/1251872738270220290 …
-
Heh. While there are some valid variations on that (like that things where some switches used to actually blink packets out, which isn't something you'd find immediately obvious) I feel like the next big things is going to be hammering realistic threat models back into people.
One of their attacks (which I also had in my list of random ideas before reading it) was using heat, between adjacent PCs. At like 2 bits per hour or something. Like, yes, if your airgap is 10cm and your threat model includes malware on the secure side, you're doing it wrong.
