4 ms·
Using flashrom [1] you can dump the contents of your SPI flash for the inspection and open the image with UEFITool [2]. Both tools are opensource and developed
by xvilka 8y ago
Using flashrom [1] you can dump the contents of your SPI flash for the inspection and open the image with UEFITool [2]. Both tools are opensource and developed for years. Some people recommend to use chipsec [3], but it can less in terms of dumping and unpacking. The state of security in UEFI firmware is horrible, thing is overengineered and poorly written (bad code practices). Not to mention Intel ME/AMT/etc that also provide the easy way for attacker to persist and hide itself once compromised. Projects like coreboot [4] and vendors like Purism [5] allow the tighter control of your own hardware, but thanks to Intel it still has a lot of blobs of a bad code. Apple realized they can't trust Intel and other "BIOS" writers, so working on improving the security and codebase. Thus the state of affairs is slightly better on Macbooks. I believe x86 firmware world is beyond any hope to get any better and everyone should focus on building better hardware/architectures from scratch. Hopefully companies like Raptor Engineering [6] can shift the mindset of consumers.
[1] https://flashrom.org/Flashrom https://flashrom.org/Flashrom
[2] https://github.com/LongSoft/UEFITool https://github.com/LongSoft/UEFITool
[3] https://github.com/chipsec/chipsec https://github.com/chipsec/chipsec
[4] http://coreboot.org/ http://coreboot.org/
[5] https://puri.sm/ https://puri.sm/
[6] https://www.raptorcs.com/content/base/products.html https://www.raptorcs.com/content/base/products.html