logoalt Hacker News

evan_a_ayesterday at 10:28 PM0 repliesview on HN

The keys can be indirectly sealed against specific system and software configurations such that this attack is not possible. Additionally, as you noted, using custom secure boot keys would prevent the attacker from booting an arbitrary OS.