3 ms·
The current version has a _very_ serious vulnerability, where when the system wakes from suspend on pre-mid-2014 models the entire UEFI BIOS is writable [0]. Th
by chrisfosterelli 11y ago
The current version has a _very_ serious vulnerability, where when the system wakes from suspend on pre-mid-2014 models the entire UEFI BIOS is writable [0]. This could lead to wipe-proof rootkits. It initially appeared that their advice was going to be "buy a new macbook", so I'm very happy to see they bundled firmware updates along with this :)
[0] https://reverse.put.as/2015/05/29/the-empire-strikes-back-apple-how-your-mac-firmware-security-is-completely-broken/ https://reverse.put.as/2015/05/29/the-empire-strikes-back-ap...
- yuhong 11y agoNow, what about things like accessing boot services memory after ExitBootServices?