3 ms·
It enables persistence (the part about it being unfixable seems click baity though): “any machine with one of the vulnerable AMD chips, the IOActive researcher
by ec109685 2y ago
It enables persistence (the part about it being unfixable seems click baity though):
“any machine with one of the vulnerable AMD chips, the IOActive researchers warn that an attacker could infect the computer with malware known as a “bootkit” that evades antivirus tools and is potentially invisible to the operating system, while offering a hacker full access to tamper with the machine and surveil its activity. For systems with certain faulty configurations in how a computer maker implemented AMD's security feature known as Platform Secure Boot—which the researchers warn encompasses the large majority of the systems they tested—a malware infection installed via Sinkclose could be harder yet to detect or remediate, they say, surviving even a reinstallation of the operating system.
- sebazzz 2y agoSince the code would then run at ring -2, would it be possible to decrypt the microcode of the CPU, or load custom microcode?