[coreboot] uefi rootkit (lojax)

[Ivan Ivanov]

> that's a pretty myopic view of coreboot and its users; coreboot
> supports 2 different UEFI payloads, which are used by both individual
> and commercial entities.

It is nice to hear there are possible alternatives ; to be honest I
don't know about their "marketshare" amoung the coreboot users. From
my point of view as a user (reading mailing lists etc.) it seemed like
the majority of coreboot users are using SeaBIOS and the majority of
libreboot users are using GRUB. Although, its' quite likely that at
the same time the majority of ChromeBook+coreboot users are really
running UEFI payload, thanks to your customized coreboot builds where
you are using it (learned about your work after a quick search)

P.S. sorry it seems I bumped an old thread and now I feel guilty

Ivan
вт, 20 нояб. 2018 г. в 18:07, Matt DeVillier <matt.devillier at gmail.com>:
>
> On Tue, Nov 20, 2018 at 8:20 AM Ivan Ivanov <qmastery16 at gmail.com> wrote:
> >
> > Thank you for the info! However we are not affected thanks to
> > coreboot's default payload being SeaBIOS. If anything, these "uefi
> > rootkit" news could be used to promote the coreboot(+SeaBIOS) project
> > to wider audiences
>
> that's a pretty myopic view of coreboot and its users; coreboot
> supports 2 different UEFI payloads, which are used by both individual
> and commercial entities.
>
> >
> > Ivan
> >
> > >
> > > hi all! :)
> > >
> > > ive just found this, and thought that it can be valuable info for the
> > > people around:
> > >
> > > https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
> > >
> > > (i hope it wont disturb anyone here, as its near to be offtopic)
> > >
> > > all the bests for all of you! :)
> > >
> > > --
> > > coreboot mailing list: coreboot at coreboot.org
> > > https://mail.coreboot.org/mailman/listinfo/coreboot
> >
> > --
> > coreboot mailing list: coreboot at coreboot.org
> > https://mail.coreboot.org/mailman/listinfo/coreboot