Microsoft proves backdoor keys are a bad idea
(disclaimer, MS employee, non-security expert here).I've read through the article, here, and in other places, and I'm seeing sentiment that this is a big fuck up on Microsoft's part.  I might be completely misunderstanding, but I just don't see it.In order to use the backdoor, you've got to flash firmware, so, you've got to have physical access to the device.  If an attacker has physical access to your device, you're already screwed.So, I don't doubt that the key exists (I had to use it myself when testing RT devices back in the win8 days), but what's the exploit here? Why is it, as the title suggests, a 'bad idea'?  Isn't a secure boot policy that can be bypassed with physical access more secure than none?