2 ms·
> If Linux included functionality to have the firmware legitimately push applications Does it need to? Is there anything stopping the firmware dropping, say, a
by stordoff 8y ago
> If Linux included functionality to have the firmware legitimately push applications
Does it need to? Is there anything stopping the firmware dropping, say, a systemd service on the disc?
- CodeWriter23 8y agoOr a start up script on SysV Init systems.
- sounds 8y agoHere are some easy ways to prevent UEFI from tampering with your drive: Disable UEFI. https://github.com/corna/me_cleaner https://github.com/corna/me_cleaner Disable the ACPI hooks that register the kernel with UEFI. http://heim.ifi.uio.no/~knuto/kernel/4.14/admin-guide/kernel-parameters.html http://heim.ifi.uio.no/~knuto/kernel/4.14/admin-guide/kernel... Use full disk encryption - unlike Microsoft Bitlocker which left backdoors for LoJack, linux vulnerabilities are publicized and you can update as soon as the patch appears on the internet. Switch to a filesystem that the UEFI malware does not understand. Or move fields and magic numbers around in an existing filesystem to create a "custom" filesystem. Or a combination of all of the above.
- tinus_hn 8y agoThat’s not legitimate. This is a documented api the firmware can use to get Windows to run a binary at boot.