# Massive Security Flaw Exposes Over 200 Tech Devices 🚨

**URL:** <https://onehack.st/t/massive-security-flaw-exposes-over-200-tech-devices/287669>\
**Category:** News & Articles\
**Created:** [July 26, 2024, 5:00pm UTC](https://onehack.st/t/massive-security-flaw-exposes-over-200-tech-devices/287669 "2024-07-26T17:00:45Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [July 26, 2024, 5:00pm UTC](https://onehack.st/t/massive-security-flaw-exposes-over-200-tech-devices/287669/1 "2024-07-26T17:00:45Z")

</div>

**Summary:**

1. **Vast Exposure** : Security firm Binarly revealed that Secure Boot, a critical security feature, is compromised on over 200 device models from top manufacturers like Acer, Dell, and Intel due to a leaked cryptographic key.

2. **Root of the Problem** : The leak originated from a GitHub repository in 2022, where a platform key was poorly secured with a weak four-character password. This key forms the foundational trust between hardware and its firmware.

3. **Broader Concerns** : The situation points to a significant supply-chain issue affecting Secure Boot integrity on numerous other devices. In addition to the initial 215 devices identified, more than 300 additional models are suspected of using insecure or test-only platform keys distributed across multiple manufacturers.

[Read more on Ars Technica](https://arstechnica.com)
