3 ms·
Platbox: UEFI and SMM Platform Security Assessment Tool for AMD and Intel
- transpute 4y agohttps://labs.ioactive.com/2022/11/exploring-security-configuration-of-amd.html https://labs.ioactive.com/2022/11/exploring-security-configu... > most, if not all, of the publicly available material is focused on Intel-based platforms. Since the release of CHIPSEC, the world has had a tool to quickly determine if the firmware does a good job protecting the system after the DXE phase and, as a result, it is hard to find misconfigured firmware in laptops from any of the major OEMs in 2022. > Make no mistake, it is not that AMD-based platforms are free from bugs. Nevertheless, judging by their description, these seem to be associated with SMI handlers rather than platform security configurations. In contrast, the only presentation we found mentioning AMD platform security was done by Pete Markowsky in 2015. This blog walks through the discovery and exploitation of a security issue that was automatically identified by an in-house developed tool.
- kramerger 4y agoIs there anything similar for ARM? The embedded world looks like a jungle sometimes
- ChuckNorris89 4y agoOther than the architecture, there's a lot less standardization in the ARM ecosystem when it comes to boot & UEFI, security.
- als0 4y agoI wonder why they are launching their own tool instead of enhancing CHIPSEC, which already has a large community https://github.com/chipsec/chipsec https://github.com/chipsec/chipsec
- transpute 4y agoGood question. From https://github.com/chipsec/chipsec https://github.com/chipsec/chipsec: For any questions or suggestions please contact us at: chipsec@intel.com For AMD related questions or suggestions please contact Gabriel Kerneis at: Gabriel.Kerneis@ssi.gouv.fr CHIPSEC should issue a statement about potential support for non-Intel platforms, https://www.basicinputoutput.com/2016/05/a-tour-of-intel-chipsec.html https://www.basicinputoutput.com/2016/05/a-tour-of-intel-chi... > CHIPSEC began its life as an internal Intel tool. As the tool matured and grew in utility, Intel released it as open source, available on Github. Anyone can download it and run it on any UEFI-based system.