3 ms·
UEFI rootkits and UEFI secure boot
- josephcsible 4y ago> I think there's a reasonable argument that the existence of firmware-level rootkits suggests that UEFI Secure Boot is doing its job and is pushing attackers into lower levels of the stack in order to obtain the same outcomes. To me, this rootkit is evidence of the opposite. Boot-time attacks are still possible despite "Secure Boot" often being used to lock down users.