#logofail — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #logofail, aggregated by home.social.
-
There are just too many A**holes in this world 😂
https://velvetshark.com/ai-company-logos-that-look-like-buttholes
-
Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.
#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux -
Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.
#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux -
Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.
#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux -
Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.
#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux -
Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.
#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux -
Code found online exploits LogoFAIL to install Bootkitty Linux backdoor - Researchers have discovered malicious code circulating in the wild that hi... - https://arstechnica.com/security/2024/11/code-found-online-exploits-logofail-to-install-bootkitty-linux-backdoor/ #unifiedextensiblefirmwareinterface #bootkitty #security #logofail #biz #linux #uefi
-
Die #LogoFAIL-Schwachstelle öffnete zahlreiche Systeme für die Einschleusung von Bootkits. Endlich kommen nun auch Patches für #AMD-Mainboards bei den Nutzern an. https://winfuture.de/news,142162.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
-
Inside the #LogoFAIL #PoC: From Integer Overflow to Arbitrary Code Execution
https://binarly.io/posts/inside_the_logofail_poc_from_integer_overflow_to_arbitrary_code_execution/
-
Hey, #ASUS when are you going to release a patch for the #LogoFail vulnerability for all your active motherboards?
I see you've released a patch for several ROG X670 models, but no fix for the ROG X570 models (one of which I've had for less than three years). You're not going to leave us hanging, are you?
-
We're making tiny steps here reproducing the #LogoFAIL vuln.
-
@frameworkcomputer are Framework laptops affected by #LogoFAIL? If so, how to patch it?
No updates are available for me with fwupd, and can't find any firmware updates on your website
-
-
Newly discovered LogoFAIL leaves hundreds of Linux and Windows systems vulnerable https://www.linux-magazine.com/Online/News/Hundreds-of-Consumer-and-Enterprise-Devices-Vulnerable-to-LogoFAIL #LogoFAIL #Linux #Windows #malware #vulnerability #security #firmware
-
C'est absolument génial, l'attaque #LogoFail. Comme bien des ordinateurs affichent un logo au démarrage, et que ce logo n'est pas en dur dans le code mais chargé depuis un fichier, l'analyseur du fichier est critique (cf. la faille récente sur WebP). Or, plein de BIOS ont un analyseur bogué, qui tourne avant le système d'exploitation, donc en open bar complet, et qui peut être trompé par une image malveillante.
https://www.blackhat.com/eu-23/briefings/schedule/index.html#logofail-security-implications-of-image-parsing-during-system-boot-35042 -
"During the boot process, vulnerable firmware will load the malicious logo from the ESP and parse it with a vulnerable image parser, thus the attacker can hijack the execution flow by exploiting a vulnerability in the parser itself. By exploiting this threat, the attacker can achieve arbitrary code execution during the DXE phase, which means complete game-over for platform security."
-
Security Week 2350: подробности атаки LogoFAIL
Об этой работе компании Binarly мы уже упоминали на прошлой неделе: исследователи нашли нетривиальный и довольно опасный способ атаки на ПК путем подмены логотипа, сохраняемого в UEFI — прошивке, ответственной за первоначальную загрузку компьютера. Ранее была известна только общая идея атаки, а на прошлой неделе было опубликовано полноценное исследование ( исходник , а также краткое описание в издании ArsTechnica). Если выражаться привычными в данной ситуации определениями, специалисты компании Binarly «обнаружили двадцать четыре уязвимости в парсерах изображений, использованных всеми тремя ключевыми поставщиками прошивок UEFI». В наиболее печальном сценарии можно использовать стандартные инструменты, предоставляемые сборщикам ПК и ноутбуков компаниями Phoenix, AMI и Insyde для загрузки в прошивку UEFI вредоносного изображения. Демонстрация этого подменного логотипа при следующем включении ПК приведет к выполнению произвольного кода, причем отследить такой «буткит» на уровне операционной системы будет максимально проблематично.
-
Wrote a tutorial for building your own platform BIOS and fuzzing the BMP boot logo image decoder using TSFFS so you can learn how to hunt for #LogoFAIL -like bugs yourself!
Check out the full tutorial or if you want to jump straight to code because you're impatient you can do that too.
-
It looks like Dell machines are not vulnerable to #LogoFail because their AMI Bios doesn't open that attack surface by allowing an enduser to modify a boot logo like Lenovo and Acer do. They still have an image parser which is vulnerable so firmware will need updated eventually.
https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/
-
Good on @frameworkcomputer for being upfront about working with their UEFI supplier on a fix a for #logoFAIL
Looking forward to some updates in the future.
https://community.frame.work/t/logofail-firmware-attack-with-link-to-insydes-security-advisory/41534/19
#framework #fw13 #insyde #bios -
They had me at "Logo is stored in an unsigned part of the firmware update file". What a great idea when your image parsers are never updated. https://i.blackhat.com/EU-23/Presentations/EU-23-Pagani-LogoFAIL-Security-Implications-of-Image_REV2.pdf #logofail #infosec #uefi
-
The #LogoFail #UEFI #exploit is a perfect example of how capitalism fucks everything up. So many people worked so hard on securing UEFI against #bootkits but having a goddamn image load was necessary for capitalist "intellectual property" to be enforced, thus opening this vulnerability for literally every Windows and Linux system with a hardware manufacturer logo loading in boot, which is most of them. https://arstechnica.com/security/2023/12/just-about-every-windows-and-linux-device-vulnerable-to-new-logofail-firmware-attack/
This isn't a security fail, it's a #capitalism fail, because the social/legal regime of #intellectualproperty is actually unnecessary and oppressive, and in this case prevented people from designing secure systems.
-
"🚨 UEFI Under Threat: The LogoFAIL Vulnerability 🚨"
A recent security report has brought attention to LogoFAIL, a collection of vulnerabilities that pose a substantial risk to devices utilizing UEFI firmware. These vulnerabilities enable attackers to install UEFI bootkits by leveraging weaknesses in the image-parsing components utilized by various vendors in their firmware. LogoFAIL's impact is widespread, affecting a broad range of devices across x86 and ARM architectures, including products from prominent manufacturers such as Intel, Acer, and Lenovo.
Researchers at Binarly have uncovered that malicious payloads can be executed by injecting image files into the EFI System Partition (ESP), effectively evading security features like Secure Boot. This method of attack ensures the persistence of malware on the system, rendering it virtually undetected. LogoFAIL's full scope of impact is still being assessed, but it is already evident that it poses a significant threat to both consumer and enterprise-grade devices, as it bypasses security mechanisms designed to protect UEFI systems.
Source: BlackHat talk and Bill Toulas, BleepingComputer
MITRE ATT&CK Reference for UEFI Vulnerabilities: T1588.006
Tags: #CyberSecurity #UEFI #Vulnerability #LogoFAIL #Bootkit #SecureBoot #FirmwareSecurity #Binarly #DeviceSecurity 🚨💻🔒
-
📬 LogoFAIL: Sicherheitslücke bedroht Millionen von PC-Nutzern
#ITSicherheit #Binarly #BlackHatEurope #BMPBildparser #Bootkit #LogoFAIL #Malware #UEFIFirmware https://tarnkappe.info/artikel/it-sicherheit/logofail-sicherheitsluecke-bedroht-millionen-von-pc-nutzern-284205.html -
📬 LogoFAIL: Sicherheitslücke bedroht Millionen von PC-Nutzern
#ITSicherheit #Binarly #BlackHatEurope #BMPBildparser #Bootkit #LogoFAIL #Malware #UEFIFirmware https://tarnkappe.info/artikel/it-sicherheit/logofail-sicherheitsluecke-bedroht-millionen-von-pc-nutzern-284205.html -
📬 LogoFAIL: Sicherheitslücke bedroht Millionen von PC-Nutzern
#ITSicherheit #Binarly #BlackHatEurope #BMPBildparser #Bootkit #LogoFAIL #Malware #UEFIFirmware https://tarnkappe.info/artikel/it-sicherheit/logofail-sicherheitsluecke-bedroht-millionen-von-pc-nutzern-284205.html -
📬 LogoFAIL: Sicherheitslücke bedroht Millionen von PC-Nutzern
#ITSicherheit #Binarly #BlackHatEurope #BMPBildparser #Bootkit #LogoFAIL #Malware #UEFIFirmware https://tarnkappe.info/artikel/it-sicherheit/logofail-sicherheitsluecke-bedroht-millionen-von-pc-nutzern-284205.html -
📬 LogoFAIL: Sicherheitslücke bedroht Millionen von PC-Nutzern
#ITSicherheit #Binarly #BlackHatEurope #BMPBildparser #Bootkit #LogoFAIL #Malware #UEFIFirmware https://tarnkappe.info/artikel/it-sicherheit/logofail-sicherheitsluecke-bedroht-millionen-von-pc-nutzern-284205.html
