Live data from Hacker News

Dasharo TrustRoot Ephemeral Key Incident

blog.3mdeb.com

1–5 of 5 posts

Re: Dasharo TrustRoot Ephemeral Key Incident

#2
This report details a release engineering incident where a Dasharo firmware update successfully performed End-of-Manufacturing (EOM) fusing on NovaCustom laptops but utilized an ephemeral testing key instead of the persistent production key. We provide a technical analysis of the situation and outline impact for affected end users.

Re: Dasharo TrustRoot Ephemeral Key Incident

#3

This report details a release engineering incident where a Dasharo firmware update successfully performed End-of-Manufacturing (EOM) fusing on NovaCustom laptops but utilized an ephemeral testing key instead of the persistent production key. We provide a technical analysis of the situation and outline impact for affected end users.

What is Dasharo and NovaCustom?

Re: Dasharo TrustRoot Ephemeral Key Incident

#4
post #3

This report details a release engineering incident where a Dasharo firmware update successfully performed End-of-Manufacturing (EOM) fusing on NovaCustom laptops but utilized an ephemeral testing key instead of the persistent production key. We provide a technical analysis of the situation and outline impact for affected end users.

What is Dasharo and NovaCustom?

NovaCustom is the EU version of a https://puri.sm laptop. it's got an open boot loader and a TPM for supporting OS's that require it like Windows 11.

Re: Dasharo TrustRoot Ephemeral Key Incident

#5
post #3

This report details a release engineering incident where a Dasharo firmware update successfully performed End-of-Manufacturing (EOM) fusing on NovaCustom laptops but utilized an ephemeral testing key instead of the persistent production key. We provide a technical analysis of the situation and outline impact for affected end users.

What is Dasharo and NovaCustom?

Dasharo is pre-installed coreboot