fubarx to TechnologyEnglish · 8 days agoCode-execution flaw in UEFI firmware affects most servers on planet Eartharstechnica.comexternal-linkmessage-square99linkfedilinkarrow-up1457arrow-down18file-textcross-posted to: [email protected][email protected]
arrow-up1449arrow-down1external-linkCode-execution flaw in UEFI firmware affects most servers on planet Eartharstechnica.comfubarx to TechnologyEnglish · 8 days agomessage-square99linkfedilinkfile-textcross-posted to: [email protected][email protected]
minus-squarenightwatch_adminlinkfedilinkEnglisharrow-up7·8 days agoYes, actual BIOSes have no network access. They had other issues though, like enough space to embed hidden persistent malware, writable from Windows.
minus-squareThe_Decryptor@aussie.zonelinkfedilinkEnglisharrow-up2·8 days agoNah, PXE predates UEFI by like 20 years, it’s been a pretty normal feature since the late 80s.
minus-squarenightwatch_adminlinkfedilinkEnglisharrow-up1·4 days agoiirc you cannot modify a bios in a pxe context, but I might be mistaken.
minus-squareThe_Decryptor@aussie.zonelinkfedilinkEnglisharrow-up1·2 days agoThere’s probably flaws that would allow executing attacker supplied code, but it’s not like BIOSs had any notion of security (i.e. secure boot) to begin with, so you could just straight up have the system boot into your own image anyway.
Yes, actual BIOSes have no network access. They had other issues though, like enough space to embed hidden persistent malware, writable from Windows.
Nah, PXE predates UEFI by like 20 years, it’s been a pretty normal feature since the late 80s.
iirc you cannot modify a bios in a pxe context, but I might be mistaken.
There’s probably flaws that would allow executing attacker supplied code, but it’s not like BIOSs had any notion of security (i.e. secure boot) to begin with, so you could just straight up have the system boot into your own image anyway.