Good news: The Dell firmware update utility definitely checks whether update executables are signed.
Bad news: Dell is posting unsigned update executables to their website labeled “critical” which then fail to install due to the good news
abadidea
npub1n7…07g0f
2024-11-25 10:52:11 UTC
Author Public Key
npub1n7kt2deqy3xk93nzcvxyy0twcw3jmhvyjhec0pss4punpsyr884ql07g0fSeen on
wss://relay.momostr.pinkPublished at
2024-11-25 10:52:11 UTCEvent JSON
{
"id": "ad92493c8d36aef5ce9b4cca3437e95ea3f71dd143629b13731369784cb23977",
"pubkey": "9facb53720244d62c662c30c423d6ec3a32ddd8495f3878610a87930c08339ea",
"created_at": 1732531931,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@0xabad1dea/113543212666056329",
"web"
],
[
"proxy",
"https://infosec.exchange/users/0xabad1dea/statuses/113543212666056329",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/0xabad1dea/statuses/113543212666056329",
"pink.momostr"
],
[
"-"
]
],
"content": "Good news: The Dell firmware update utility definitely checks whether update executables are signed.\n\nBad news: Dell is posting unsigned update executables to their website labeled “critical” which then fail to install due to the good news",
"sig": "7c8226c129869afbe32e41438910444d9454ebde04c206faf737e53164af105ee2bd95ce8c547fb8dda95d9316358f0d0bed90bea879d4403d498a7d3d667fe1"
}