“Not if the attacker was sloppy.” She pulled up a log file. “They injected a fake bootloader to trigger the lock. But they reused an entropy signature from a known vulnerability—CVE-2023-1017. The recovery key’s checksum is still in the reserved memory block.”
