Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Getting into SMM means you can circumvent flash protection, which means you can rewrite the firmware to backdoor the OS on every boot without needing to leave any evidence in the filesystem, which a normal compromise of ring 0 wouldn't. I don't think most people need to worry about this, but if the claims are accurate this is a genuine circumvention of a privilege boundary.



Yeah. it sounds like SMM was a mistake, and we should have a user-controlled OS at that level (or, nothing at all).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: