#kb5025885 — Public Fediverse posts

📬 BitUnlocker knackt BitLocker in unter fünf Minuten
#ITSicherheit #Bitlocker #BitUnlocker #CVE202548804 #KB5025885 #SecureBoot #TPM #TPMonlyBitLocker #Windows11 #WinRE #YellowKey https://sc.tarnkappe.info/2ff8e4

📬 BitUnlocker knackt BitLocker in unter fünf Minuten
#ITSicherheit #Bitlocker #BitUnlocker #CVE202548804 #KB5025885 #SecureBoot #TPM #TPMonlyBitLocker #Windows11 #WinRE #YellowKey https://sc.tarnkappe.info/2ff8e4

📬 BitUnlocker knackt BitLocker in unter fünf Minuten
#ITSicherheit #Bitlocker #BitUnlocker #CVE202548804 #KB5025885 #SecureBoot #TPM #TPMonlyBitLocker #Windows11 #WinRE #YellowKey https://sc.tarnkappe.info/2ff8e4

📬 BitUnlocker knackt BitLocker in unter fünf Minuten
#ITSicherheit #Bitlocker #BitUnlocker #CVE202548804 #KB5025885 #SecureBoot #TPM #TPMonlyBitLocker #Windows11 #WinRE #YellowKey https://sc.tarnkappe.info/2ff8e4

📬 BitUnlocker knackt BitLocker in unter fünf Minuten
#ITSicherheit #Bitlocker #BitUnlocker #CVE202548804 #KB5025885 #SecureBoot #TPM #TPMonlyBitLocker #Windows11 #WinRE #YellowKey https://sc.tarnkappe.info/2ff8e4

#Microsoft does it again on #PatchTuesday with a flawless victory against the forces of...bootable media?

That includes any emergency boot disks, recovery partitions created by the OEM that makes your computer, recovery partitions you made prior to today, bootable media from third parties including emergency recovery tools.

On the one hand, the CVE-2023-24932 bug seems really bad. UEFI malware that inserts itself at a lower level than Secure Boot? It's incredibly dangerous. [Edit: changed "but" to "bug"]

On the other hand, it's also extremely rare and unlikely to affect most users. Meanwhile, the thing that does affect many Windows users are crashes that cause the computer not to be able to boot.

And now, the #KB5025885 patch removes the one safety net under the high wire. Now you get to go wild and free and maybe...your computer falls to its death.

Ai yi yi, I am normally the guy who tells you to apply these important patches right away, and this has me questioning that advice.

If you decide that you need to do this, you probably need to find another method of creating a bootable backup of your system drive, just in case something goes wrong. I use a NVMe drive and have an external backup device that lets me clone from my main drive to a second NVMe drive, but that's a highly specialized set of tools and it's not cheap or easy.

This whole situation seems like something that could have been handled a lot better by our friends in the MSRC.

#CVE202324932 #24932 #UEFI #SecureBoot #BlackLotus #patch #Windowsupdate

https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d#install5025885

How to ensure that only experts install the CVE-2023-24932 / #blacklotus_bootkit mi​tigations properly... 🤦​ #fail #KB5025885