News for hackers. Stuff that matters.

A comment on Intel ME Manufacturing Mode: obscured dangers and MacBook vulnerability. Parent comment

Re:Intel ME Manufacturing Mode: obscured dangers and MacBook... by 294de3557d9d00b on Wednesday October 03, 2018 @11:52AM (#18131464)
CVE-2018-12169: Platform sample code firmware included with Haswell, Broadwell, Skylake, Kaby Lake, Coffee Lake and Cannon Lake processors contains a logic error allowing a physical attacker to bypass BootGuard firmware authentication. https://edk2-docs.gitbooks.io/security-advisory/content/unau...

"also potentially allows a developer to "jailbreak" their BootGuard protected laptop since the UEFI DXE volume can be replaced with a user provided LinuxBoot ROM image": https://twitter.com/qrs/status/1044157473882591233

[ Parent | on HN ]
Re:Intel ME Manufacturing Mode: obscured dangers and MacBook... by oneplane on Wednesday October 03, 2018 @03:39PM (#18134023)
Well, LinuxBoot is more like heads (the kernel based pre-boot environment), which was possible for a while now (because the DXE was often not required to be signed for BootGuard to be happy).

If we could do coreboot with only the FSP as blob, that would be cool. We'd still have the ME glued in tho, so not complete free booting there yet.

Also, sadly, most firmwares out there don't have that 1:1 edk2 code in their firmware.

[ Parent | on HN ]