3 ms·
The Lo Jack stuff is a red herring. The main attack vector is SPI write protection bypass. I'm not sure what they used to get local root though. Once you can wr
by bubblethink 8y ago
The Lo Jack stuff is a red herring. The main attack vector is SPI write protection bypass. I'm not sure what they used to get local root though. Once you can write to the SPI flash, you can write whatever you want, lojack or not. And this uses some old known vulnerabilities for SPI write bypass. There have been some of those over the years. I had to use one myself to bypass wifi whitelists in lenovo bioses. I don't think this would work on platforms with boot-guard though.
- samirm 8y agothat's correct, something like SecureBoot would have prevented this as the signatures wouldn't have been able to be verified and therefore never proceeded.
- bubblethink 8y agoNo secure boot doesn't prevent this directly. Secure boot checks for the booting OS. Boot guard is what checks the booting BIOS.