News for hackers. Stuff that matters.

A comment on Researchers Identify Weakness in Microsoft WPBT.

Re:Researchers Identify Weakness in Microsoft WPBT by scohesc on Tuesday September 28, 2021 @11:27AM (#28683941)
Would this be the feature that's causing my ASUS Motherboard to automatically install ASUS Armoury (some silly OEM app) every time I update my BIOS?

It's frustrating to see more and more control of our machines being taken away and hidden under layers of firmware/hardware/closed source code - especially if it's exploitable like this... It seems like a very short-sighted bug!

However, I could see this feature being somewhat helpful for OEMS (Dell/HP deploying their "support assist" softwares for their devices if it's uninstalled/new copy of Windows.

[ Parent | on HN ]
Re:Researchers Identify Weakness in Microsoft WPBT by gruez on Tuesday September 28, 2021 @12:09PM (#28684420)
> Would this be the feature that's causing my ASUS Motherboard to automatically install ASUS Armoury (some silly OEM app) every time I update my BIOS?

maybe? the other option is through window's auto driver update feature, which also runs arbitrary code. see: https://news.ycombinator.com/item?id=28273283

[ Parent | on HN ]
Re:Researchers Identify Weakness in Microsoft WPBT by shawnz on Tuesday September 28, 2021 @01:23PM (#28685206)
Yes, I believe that feature uses WPBT. On my ASUS motherboard I was able to disable it by turning off "Q-Installer" in the BIOS settings.
[ Parent | on HN ]