News for hackers. Stuff that matters.

A comment on Xeno Kovah: macOS 10.13 EFI firmware integrity check. Parent comment

Re:Xeno Kovah: macOS 10.13 EFI firmware integrity check by Someone on Sunday September 24, 2017 @06:58PM (#15326967)
”This will allow eficheck to send the binary data from the EFI firmware, preserving your privacy by excluding data which is stored in NVRAM”

How can they know that’s sufficient to preserve user privacy? The code sends data they don’t know of to Apple. That could contain anything, including compromising photos (not that likely) and private keys (slightly more likely)

[ Parent | on HN ]
Re:Xeno Kovah: macOS 10.13 EFI firmware integrity check by snuxoll on Sunday September 24, 2017 @10:33PM (#15327704)
Why would any of that be embedded in your EFI firmware blob?
[ Parent | on HN ]
Re:Xeno Kovah: macOS 10.13 EFI firmware integrity check by Someone on Monday September 25, 2017 @07:42PM (#15335075)
Apple cannot guarantee I will not include any of that in my firmware.

They also should not be that surprised to find photos in my firmware, as they have shipped photos in their firmware in the past (https://www.nycresistor.com/2012/08/21/ghosts-in-the-rom/)

[ Parent | on HN ]