UEFI private signing key leaked, when security goes totally wrong, with the help of a security researcher

Today there was a blog post http://adamcaudill.com/2013/04/04/security-done-wrong-leaky-ftp-server/ by security researcher Adam Caudill. Apparently source code to EFI Firmware leaked through an insecure Tawianese FTP server. Unfortunately he did not wait until the FTP was completely secured. For security researchers – like us – it is easy to find loopholes, to find the original FTP URL […]