#bootguard — Public Fediverse posts

ServeTheHome: Intel Boot Guard OEM Private Key Allegedly Leaked

https://www.servethehome.com/intel-boot-guard-oem-private-key-allegedly-leaked/

#Intel #BootGuard

#Intel #BootGuard Keys From #MSI Hack Posted, Many PCs Vulnerable

Files stolen during the last month's MSI hack have started to spread around the dark web.

One of the more worrying things spotted among the digital loot is an Intel OEM private key. MSI would have used this to sign its firmware/BIOS updates to pass Intel Boot Guard verification checks. Now hackers can use the key to sign malicious BIOS, firmware & apps, which will look entirely like official MSI releases.
https://www.tomshardware.com/news/msi-bootguard-keys-leaked-to-internet

@Green @frameworkcomputer I also don't get why they choose this way.
Why are the frameworks fused and signed by using #bootguard?

They could just follow the good known and working example of the chromebooks without bootguard. Simple, secure, easy to understand, open, repairable, hackable. Aren't those attributes they like to use with #frameworks?

Attackers can #exploit over 100 different Lenovo computer models + hide malware inside firmware.

Are you patched? 🤔

#News #Lenovo #Firmware #UEFI #malware #spyware #laptop #computer #infosec #cybersecurity #bootguard #SPI #Flash

https://arstechnica.com/information-technology/2022/04/bugs-in-100-lenovo-models-fixed-to-prevent-unremovable-infections/

Hackers can use just-fixed Intel bugs to install malicious firmware on PCs - Enlarge (credit: Getty Images)
As the amount of sensitive data stored on computers has exploded o... - https://arstechnica.com/?p=1723170 #managementengine #physicalattacks #bootguard #biz&it #intel #tech

It says it wants #coreboot #firmware, doesn't have #BootGuard enabled. :)

This is so far the tiniest #laptop #mainboard I've seen, from a T-bao Tbook (https://m.gearbest.com/laptops/pp_650502.html). The battery died, it boots no longer, so I am trying to investigate it. The #UEFI #firmware image has lots of #VBT entries, interestingly, and is not locked by #BootGuard.