[juhanima]

Is it really that easy just to overwrite the secure boot key database? I set up recently secure boot on a Lenovo laptop according to these instructions https://nwildner.com/posts/2020-07-04-secure-your-boot-proce...

...and deploying the keys involves setting UEFI in the Setup mode, which is protected by the firmware setup password.

Granted, I didn't verify where the keys are stored and in which format once deployed. But it would be pretty disappointing if they were just copied to another place without any encryption or signing authorized by the password.

[mjg59]

The UEFI variable store is typically just a region of the flash chip that stores the firmware. It's not impossible that some systems perform some sort of integrity validation, but I haven't seen that in the wild.

[Harvesterify]

Isn't Intel Bios Guard supposed to protect against this very attack ?