News for hackers. Stuff that matters.

A comment on After CIA leak, Intel Security releases detection tool for EFI rootkits. Parent comment

Re:After CIA leak, Intel Security releases detection tool fo... by hdhzy on Friday March 10, 2017 @02:31PM (#13841336)
Well even with reproducible builds how do you check what actually is running there? That'd be the ME reporting "I'm running version X" without a way to really verify it. Also if you flashed it you cannot be 100% sure there is no other component that is still running a rootkit.
[ Parent | on HN ]
Re:After CIA leak, Intel Security releases detection tool fo... by schoen on Friday March 10, 2017 @04:31PM (#13842302)
Good analysis of this issue in Halvar Flake's https://www.slideshare.net/hashdays/why-johnny-cant-tell-if-... ("Why Johnny can't tell if he is compromised").
[ Parent | on HN ]
Re:After CIA leak, Intel Security releases detection tool fo... by ams6110 on Friday March 10, 2017 @06:55PM (#13843184)
Or Ken Thompsons's Reflections on Trusting Trust.
[ Parent | on HN ]