4 ms·
Suppose I want to get into hacking UEFI firmware. Does this mean I can buy some Microsoft device, download the C++ code for the firmware, make some changes if
by csense 8y ago
Suppose I want to get into hacking UEFI firmware. Does this mean I can buy some Microsoft device, download the C++ code for the firmware, make some changes if I want to, compile it, and load it onto the device?
If so, that's really cool.
- bayindirh 8y agoIf you're flashing via the UEFI interface itself (which can have a very fancy terminal), the firmware might need to be signed. I bet Microsoft will not share the signing keys.
- Avery3R 8y agoProduction surface devices have intel bootguard enabled and the public key fused into the pch. You'd have to bypass it somehow.
- cyphar 8y agoThat is only used to check firmware signatures, not UEFI binary signatures. You should be able to add keys to DB and KEK at your leisure. Also Microsoft has a paid program to sign UEFI binaries (that's why you can boot most Linux distributions on secure boot hardware).
- voltagex_ 8y agoYou may be able to build this, put your existing device into unsigned mode, then chain from the UEFI shell [1] into this - or just put it on a FAT32 flash drive as \EFI\boot\bootx64.efi. On the "embedded" side, I'm pretty sure u-boot can load EFI binaries now.