3 ms·
> The closed-sourceness is only a tiny part of the problem, too - a lot of the worst attacks so far are actually in open source based EFI firmware, which is rid
by aspenmayer 3y ago
> The closed-sourceness is only a tiny part of the problem, too - a lot of the worst attacks so far are actually in open source based EFI firmware, which is riddled with bugs.
Can you elaborate and/or provide context/links?
- bri3d 3y agohttps://eclypsium.com/blog/understanding-detecting-pixiefail-uefi-vulnerabilities/ https://eclypsium.com/blog/understanding-detecting-pixiefail... https://binarly.io/posts/The_Far_Reaching_Consequences_of_LogoFAIL/ https://binarly.io/posts/The_Far_Reaching_Consequences_of_Lo...
- aspenmayer 3y agoMakes sense given the context. When you said bugs in open source EFI implementations, I thought you meant bugs in things like rEFI/rEFInd/rEFIt.