This may interest some

5 Likes

Ever since UEFI was introduced, i had the “It is overly and unnecessarily complicated for the functions it has” thoughts about it.
The existence of exploits is hardly surprising - it is a simple consequence of the above very general thought.

2 Likes

The penultimate chapter of Bootkits and Rootkits reveals a systemic issue with how our vendors CHOOSE to defend firmware. I am neither a proponent nor detractor of UEFI, however, what I can say is that there are defensive countermeasures that are actively ignored by nearly every vendor on the market.

Great book. https://nostarch.com/rootkits

2 Likes