> The BIOS can just install vulnerable SMM handlers and then you're screwed. Writing SMM handlers is not an easy job. Using the API provided by Windows to make

> The BIOS can just install vulnerable SMM handlers and then you're screwed. Writing SMM handlers is not an easy job. Using the API provided by Windows to make installations as described by the article is an easy job. The installed program is just plain simple user space code that can use all services of the operating system. No special skills required to make it phone home. Are there any reports of an SMM handler able to phone home? (Honestly curious)