4 ms·
It's not just about evil maids and physical access. Even if you did get root level RCE, you did not have access to screw with hardware security. With the UEFI k
by sigmoid10 4y ago
It's not just about evil maids and physical access. Even if you did get root level RCE, you did not have access to screw with hardware security. With the UEFI keys, you suddenly have a whole new level of persistence, meaning that if you ever get pwned, you can basically throw your hardware in the trash, because even a system level wipe will not be a guaranteed way to clean malware.
- AshamedCaptain 4y agoIf your attacker has root, and your system allows flashing the BIOS from root (many do), he can simply disable Secure Boot, or enroll one extra signature -- his. If the system doesn't allow flashing a BIOS even if an attacker has root access, then Secure Boot makes no difference whatsoever.
- hiatus 4y agoWhat does the boot rom have to do with the root user of an operating system? How does root help you disable secure boot if there is a password to change UEFI settings for instance?
- IgorPartola 4y agoAt the point where you have root you basically won. You can ship user’s data elsewhere. You can install a key logger. You can empty their bank account. But yes if the OS also let’s you change the boot ROM then you can make your root access semi-permanent.
- sigmoid10 4y ago[dead]