UEFI bootkit

[Eddie G. O'Connor Jr.]

On 09/19/2012 11:06 PM, JD wrote:
>
> On 09/19/2012 08:50 PM, Eddie G. O'Connor Jr. wrote:
>> On 09/19/2012 10:47 PM, JD wrote:
>>>
>>> On 09/19/2012 08:30 PM, Eddie G. O'Connor Jr. wrote:
>>>> On 09/19/2012 02:05 PM, Mike Wright wrote:
>>>>> And in today's news:
>>>>>
>>>>> http://www.theregister.co.uk/2012/09/19/win8_rootkit/
>>>>>
>>>>> A few things in particular stood out to me:
>>>>>
>>>>> 1)  "Writing a bootkit couldn't be an easier task for virus 
>>>>> writers with the UEFI framework available, much easier than before 
>>>>> when they needed to code in pure assembly."
>>>>>
>>>>> 2) "... unless SecureBoot is used to ensure that only digitally 
>>>>> signed UEFI bootloaders can be executed at the system bootup.
>>>>>
>>>>> 3) "... enabling SecureBoot by default effectively limits user 
>>>>> choice."
>>>>>
>>>>> Great!  MS shoots self in foot, others in head.  We saw it coming :/
>>>>
>>>>
>>>> Or.......maybe this was a little "skit" to help make the push for 
>>>> universal UEFI enforcement?.....this way Linux users are locked 
>>>> out, the landscape once again returns to the Windows vs Apple 
>>>> conflict eliminating the biggest threat to both of them in one 
>>>> hatchet swing! I for one am going to be looking into way to get 
>>>> around this thing.....I see no reason to be locked into using a 
>>>> particular brand or service JUST because someone ELSE thinks I should!
>>>>
>>>>
>>>> EGO II
>>> I think there will be at least a few mobo manufacturers who will 
>>> provide the buyer the option
>>> of either uefi or traditional bios. Not so sure about laptop 
>>> manufacturers. Perhaps
>>> one or more may choose to offer that choice.
>>>
>>
>>
>> And if there's no "options" out there?.....then what? do I just go 
>> ahead and install my OWN version of a BIOS and hope for the best?...
>>
>>
>> EGO II
> In that case, I feel that many people will start building open source
> bioses for a limited set of mobos. They will provide the software to
> burn the bios into the mobo's eeprom or will even sell mobo's which
> them modify and install their own bios prom on. I think nature abhors 
> vaccum.
>

I agree, well then in that case I'm not as worried as I was before!


EGO II