News for hackers. Stuff that matters.

A comment on Mac OS High Sierra automatically checks EFI firmware each week. Parent comment

Re:Mac OS High Sierra automatically checks EFI firmware each... by microcolonel on Sunday September 24, 2017 @09:07PM (#15327397)
Yeah, it seems like this would have to be accomplished with a Management Engine application or something of the sort, otherwise probably easy to circumvent.

Seems the collection behaviour is also pretty straightforward to avoid, since you could just have an NVRAM region with the actual code in it, or a decryption stub.

Then again, at least it's something, no use raining on their parades.

[ Parent | on HN ]
Re:Mac OS High Sierra automatically checks EFI firmware each... by gruez on Sunday September 24, 2017 @09:24PM (#15327459)
>Yeah, it seems like this would have to be accomplished with a Management Engine application or something of the sort, otherwise probably easy to circumvent.

The correct solution to this is secureboot. No need for ME shenanigans.

[ Parent | on HN ]
Re:Mac OS High Sierra automatically checks EFI firmware each... by microcolonel on Sunday September 24, 2017 @09:35PM (#15327505)
If secureboot is functioning, then the wrong firmware wouldn't be installed to begin with by the time OS X gets to it, because it would not be allowed to run.
[ Parent | on HN ]