Microsoft's 'Golden Key' leak adds to case against backdoor access (MSFT)

This story was delivered to BI Intelligence Apps and Platforms Briefing subscribers. To learn more and subscribe, please click here.

Windows has inadvertently leaked a “golden key” that enables illicit access to Windows phones, tablets, and computers protected by Secure Boot, according to The Next Web.

The key works only for the owners of these devices or users with admin rights. However, once admitted access, the key allows users to install and run any OS and permit the installation of malicious software. Although Microsoft has released two patches, with a third coming in September, the security researchers who first discovered the leak believe it will be nearly impossible to mitigate the problem entirely.

Microsoft’s leak could be used as evidence to support tech companies in the ongoing dispute over providing governments backdoor access to encrypted devices. In February, Apple denied the FBI access to an iPhone used in the San Bernardino shootings in the US. Since then, there has been a global push from government agencies for the creation of backdoor access to encrypted devices and apps.

The US government insists that the key would be used only to aid in law-enforcement and terrorist cases. However, Microsoft created its key to make it easier for developers to debug its software. For many, this leak reinforces the idea held by tech companies that backdoor keys serve as potential security vulnerabilities to users’ personal data.

To receive stories like this one directly to your inbox every morning, sign up for the Apps and Platforms Briefing newsletter. Click here to learn more about how you can gain risk-free access today.

Join the conversation about this story »