Hacker News Reader

Seems like you could still "downgrade" via an upgrade:

1. Disable firmware digital signature verification (not sure if this is at the hardware level or not)

2. Modify the older firmware such that its reported version is newer than your current version

3. "upgrade" to the older firmware version

> 1. Disable firmware digital signature verification (not sure if this is at the hardware level or not)

That's supposed to be very difficult to do.

Exactly, every stage of the boot is supposed to validate the next stage before continuing.

The recently discovered bootrom exploits break that chain of trust, allowing unsigned code to execute.