3 ms·
But why?
by madduci 8mo ago
But why?
- monax 8mo agoIt's just a silly experiment; the real endgame is to make a bootloader that is customisable using HTML/CSS/JS
- magicalhippo 8mo agoSince PDFs can contain JS, presumably that should be the preferred way of modifying your boot loader.
- monax 8mo agoYeah that's the natural next step, I'll work on that next
- ThrowawayTestr 8mo agoWhy not?
- madduci 8mo agoBecause this can end very badly. It is a new surface to attack
- yjftsjthsd-h 8mo agoMaybe? What's your threat model?
- M95D 8mo agoExactly! It's actually great! More ways to jailbreak stuff.
- eqvinox 8mo agoWhy is it a new surface? Either you can run UEFI code, or you can't. Attacking the JS interpreter itself is unrealistic IMHO, it's the poorly written JavaScript running on top of this that might open new surfaces of attack. But other UEFI code is mostly written in C or C++, so let's call that a wash?