The chill I got when I downloaded the repo and realized the “exploit” was a zero byte file with a magic filename…

[baa@mk.absturztau.be]

@0xabad1dea@infosec.exchange once upon a time they would've employed people to catch this stuff before it goes out, and ensure the CIA pay for such privileges

[rst@mastodon.social]

@0xabad1dea The charitable interpretation also assumes that in choosing the trigger for this debug behavior, they'd select a filename including a very large number of apparently random digits.

[zenrenji@kafeneio.social]

@0xabad1dea it already stored the passkeys to the cloud and they give to authorities when asked i guess one bypass wasnt enough

[0xabad1dea@infosec.exchange]

@rst well, yes actually, having seen tons of firmware code, that’s quite normal and non-suspicious functionality does this all the time. it’s presumably just a guid

[coosis@mstdn.plus]

@0xabad1dea i am sorry WHAT

[stonebear2@hachyderm.io]

@0xabad1dea It's microsoft. They get no charity at all; they should be paying alms to the lot of us, everyone who ever booted 95 or higher...

[jbiserkov@mas.to]

@0xabad1dea
> windows 10 is not [affected]

[somevegancheeseisok@mastodon.social]

@0xabad1dea shiiiiiiiiiit that's cool

[jackemled@furry.engineer]

@0xabad1dea Maybe their new LLM forgot to remove the code before shipping a new production version.

[oilheap@infosec.exchange]

@0xabad1dea this is what you get when you do disk encryption without user input

[landelare@mastodon.gamedev.place]

@0xabad1dea This would be pretty serious if BitLocker was a security feature, not a user annoyance one.