3 ms·
https://labs.ioactive.com/2022/11/exploring-security-configuration-of-amd.html https://labs.ioactive.com/2022/11/exploring-security-configu... > most, if not a
by transpute 4y ago
https://labs.ioactive.com/2022/11/exploring-security-configuration-of-amd.html https://labs.ioactive.com/2022/11/exploring-security-configu...
> most, if not all, of the publicly available material is focused on Intel-based platforms. Since the release of CHIPSEC, the world has had a tool to quickly determine if the firmware does a good job protecting the system after the DXE phase and, as a result, it is hard to find misconfigured firmware in laptops from any of the major OEMs in 2022.
> Make no mistake, it is not that AMD-based platforms are free from bugs. Nevertheless, judging by their description, these seem to be associated with SMI handlers rather than platform security configurations. In contrast, the only presentation we found mentioning AMD platform security was done by Pete Markowsky in 2015. This blog walks through the discovery and exploitation of a security issue that was automatically identified by an in-house developed tool.