4 ms·

I really don't get what you're saying. None of your proposals would solve the problem being discussed. Are cryptographic hashes not already completely common-pl

I really don't get what you're saying. None of your proposals would solve the problem being discussed. Are cryptographic hashes not already completely common-place? That was standard even 10 years ago, if only just to make sure the files are not corrupt. In actuality, running virus checks is a fine idea, particularly if the process can be automated and updated for newer threats.

mrfredward 7y ago
Once an attacker has control of the firmware, faking virus scan results is trivial.
0xEFF 7y ago
It seems you're conflating cryptographic hash with a digital signature. Digitally signed updates via pre-boot environment with a read only post-boot environment is an effective way to solve the problem being discussed.