New Post: PureBoot Not Vulnerable to UEFI Exploits (Again)

[FranklyFlawless]

@jonathon.hall has written a new blog post for Purism.

PureBoot Not Vulnerable to UEFI Exploits (Again) – Purism

See also:

LogoFail UEFI security issue

coreboot/SeaBIOS and PureBoot for Librem devices are not affected. In a sentence, this vulnerability places a malicious logo on the EFI System Partition that UEFI firmware loads early in the boot process, so a compromise at that point can subvert UEFI Secure Boot. Our PureBoot images do not have a bootsplash. Further, PureBoot (non-Basic mode) checks the signature on the contents of /boot before booting, so the attack surface for malicious tampering is limited to PureBoot’s signature informat…