fubarx@lemmy.world to Technology@lemmy.worldEnglish · 5 days agoCode-execution flaw in UEFI firmware affects most servers on planet Eartharstechnica.comexternal-linkmessage-square98linkfedilinkarrow-up1453arrow-down19file-text
arrow-up1444arrow-down1external-linkCode-execution flaw in UEFI firmware affects most servers on planet Eartharstechnica.comfubarx@lemmy.world to Technology@lemmy.worldEnglish · 5 days agomessage-square98linkfedilinkfile-text
minus-squareFiniteBanjo@feddit.onlinelinkfedilinkEnglisharrow-up23arrow-down1·edit-25 days agoNeat. So are legacy BIOS actually more secure at the moment? Weird to think about but very reminiscent of that one time almost every Gigabyte™ brand mobo had an exploit tied to its online update capability.
minus-squarenightwatch_admin@lemmy.worldlinkfedilinkEnglisharrow-up7·5 days agoYes, actual BIOSes have no network access. They had other issues though, like enough space to embed hidden persistent malware, writable from Windows.
minus-squareThe_Decryptor@aussie.zonelinkfedilinkEnglisharrow-up2·5 days agoNah, PXE predates UEFI by like 20 years, it’s been a pretty normal feature since the late 80s.
minus-squarenightwatch_admin@lemmy.worldlinkfedilinkEnglisharrow-up1·22 hours agoiirc you cannot modify a bios in a pxe context, but I might be mistaken.
minus-squarecenzorrll@piefed.calinkfedilinkEnglisharrow-up1·5 days agoOnly from this specific exploit
Neat. So are legacy BIOS actually more secure at the moment? Weird to think about but very reminiscent of that one time almost every Gigabyte™ brand mobo had an exploit tied to its online update capability.
Yes, actual BIOSes have no network access. They had other issues though, like enough space to embed hidden persistent malware, writable from Windows.
Nah, PXE predates UEFI by like 20 years, it’s been a pretty normal feature since the late 80s.
iirc you cannot modify a bios in a pxe context, but I might be mistaken.
Only from this specific exploit