3 ms·
That is true, but disabling firmware update (should) limit the available persistence for the malware.
by R0b0t1 4y ago
That is true, but disabling firmware update (should) limit the available persistence for the malware.
- mjg59 4y agoLimit, but it doesn't remove all avenues of attack. Firmware config needs to be writable at runtime (things like cold boot attack protection require state to persist over power cycles, even if you don't think other firmware config should be modifiable without physical presence), and the code that parses that could still contain vulnerabilities. Making firmware mostly read-only would mitigate certain classes of attack, but not all of them.
- R0b0t1 4y agoPerfect is the enemy of good enough.