News for hackers. Stuff that matters.

A comment on Ask HN: Too theoretical for hackers to flash your firmware excluding boot ROM?.

Re:Ask HN: Too theoretical for hackers to flash your firmwar... by wmf on Wednesday December 11, 2024 @08:22PM (#42395131)
Intel/AMD/Apple have put a decent amount of work into protecting boot and EC firmware but all the other stuff is probably totally insecure. Any code running in kernel mode could flash a lot of different firmware. Note that built-in devices probably have their firmware bundled into the main boot firmware so they may be protected.

Just because something is possible doesn't mean it's likely that an attacker would burn a 0-day against you though.

[ Parent | on HN ]
Re:Ask HN: Too theoretical for hackers to flash your firmwar... by bigiain on Wednesday December 11, 2024 @09:37PM (#42395626)
AMD have just had a big FAIL there:

https://news.ycombinator.com/item?id=42395618

https://arstechnica.com/information-technology/2024/12/new-b...

[ Parent | on HN ]
Re:Ask HN: Too theoretical for hackers to flash your firmwar... by PrimaryAlibi on Wednesday December 11, 2024 @08:36PM (#42395214)
I asked about 0-day because I dont think anyone would use that on me. So if I know that it can only be done with a 0-day then I would practically be secure.

The first paragraph you made doesn't sound so convincing though with mostly "probably" and no source or explanation other than intel has put a lot of effort into protecting the boot rom and EC. If you or someone could elaborate further that would be great.

[ Parent | on HN ]