• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

New BootHole Vulernability Revealed, Impacts Billions of Devices

erek

erek

Fully [H]
2FA
Joined
Dec 19, 2005
Messages
17,421
"The announcement comes as part of a coordinated disclosure with OS vendors, computer manufacturers, and CERTs, many of which Eclypsium says will release individual announcements today. Those companies include Microsoft, Oracle, Red Hat, Canonical (Ubuntu), SuSE, Debian, Citrix, VMware, and a spate of various OEMs and software vendors.


The company projects the vulnerability will take some time to be patched for all systems, with various entities announcing their own schedules for patch releases. Per the company:

"Mitigation is complex and can be risky and will require the specific vulnerable program to be signed and deployed, and vulnerable programs should be revoked to prevent adversaries from using older, vulnerable versions in an attack. The three-stage mitigation process will likely take years for organizations to complete patching.""

https://www.tomshardware.com/news/new-boothole-vulernability-revealed-impacts-billions-of-devices
 
longblock454 said:
Requires root access or an already compromised system on Linux (probably Windows also) to exploit, so meh.
Click to expand...
Yes, but also this makes it more annoying:
However, once compromised, the system appears to operate as normal even though malware has complete access to the system and OS. The malicious code then resides in the bootloader, and thus will persist even after re-installing the operating system.
Click to expand...
You think you just reinstalled your OS and you are clean? You should probably reload the UEFI firmware as well just to be sure.

Luckily a lot of new servers have separate uefi firmware authentication that is not connected to the host OS. So in that case you shouldn't need to worry about reload the uefi firmware.
 
longblock454 said:
Requires root access or an already compromised system on Linux (probably Windows also) to exploit, so meh.
Click to expand...
Requires it now, but could be piggybacked on a different exploit.... Single exploits are rarely dangerous, too many things can factor in, but pair 2 or 3 together and you are in for a bad time.
 
serpretetsky said:
Yes, but also this makes it more annoying:

You think you just reinstalled your OS and you are clean? You should probably reload the UEFI firmware as well just to be sure.

Luckily a lot of new servers have separate uefi firmware authentication that is not connected to the host OS. So in that case you shouldn't need to worry about reload the uefi firmware.
Click to expand...

Reference your second quote... If I am thinking solely end user, not server side, who doesn't format a drive before installing windows again? The EFI partition is removed in that sense.
 
auntjemima said:
Reference your second quote... If I am thinking solely end user, not server side, who doesn't format a drive before installing windows again? The EFI partition is removed in that sense.
Click to expand...
This in reference to the UEFI firmware on the motherboard, not on the drive. It's typically stored in nor flash spi memory. ( same as bios before it was replaced by uefi)

edit: I read it again and it's actually not clear to me what they are referring to. If it is indeed the boot code on the drive then I agree with you; who cares? If it is the uefi fw on the board then that's certainly more annoying.
 
serpretetsky said:
This in reference to the UEFI firmware on the motherboard, not on the drive. It's typically stored in nor flash spi memory. ( same as bios before it was replaced by uefi)

edit: I read it again and it's actually not clear to me what they are referring to. If it is indeed the boot code on the drive then I agree with you; who cares? If it is the uefi fw on the board then that's certainly more annoying.
Click to expand...
They're referring to the firmware. It's a boot loader vulnerability, hence the name.
 
Shoganai said:
They're referring to the firmware. It's a boot loader vulnerability, hence the name.
Click to expand...
You said 2 opposing things and then made it seem like it was clear... A boot loader is typically on disk (I've written custom bootloader's for PCs, so I'm familiar with the term)... UEFI firmware is something else but is slightly more complex than a normal bios, so it can also handle part of the responsibility of the bootloader. It's not as ambiguous as it used to be. So saying bootloader doesn't really narrow it down.
 
Ready4Dis said:
You said 2 opposing things and then made it seem like it was clear... A boot loader is typically on disk (I've written custom bootloader's for PCs, so I'm familiar with the term)... UEFI firmware is something else but is slightly more complex than a normal bios, so it can also handle part of the responsibility of the bootloader. It's not as ambiguous as it used to be. So saying bootloader doesn't really narrow it down.
Click to expand...
It's referring to secure boot.
 
Everyone has a boothole.

This is why strip clubs do not allow physical access.
 
serpretetsky said:
You think you just reinstalled your OS and you are clean? You should probably reload the UEFI firmware as well just to be sure.

Luckily a lot of new servers have separate uefi firmware authentication that is not connected to the host OS. So in that case you shouldn't need to worry about reload the uefi firmware.
Click to expand...

I eliminated that problem, I use an LGA1366 based system running an actual BIOS as opposed to UEFI.
 
PhaseNoise said:
Everyone has a boothole.

This is why strip clubs do not allow physical access.
Click to expand...

I am imagining a darkened club with a big sandbox next to a stage, and a bunch of unattractive businessmen sitting in it, masturbating, while a stripper on stage spins on a pole.


-- I don't wish for money or fame or good looks in my next life. In my next life I just want a different imagination.
 
seanreisk said:
I am imagining a darkened club with a big sandbox next to a stage, and a bunch of unattractive businessmen sitting in it, masturbating, while a stripper on stage spins on a pole.


-- I don't wish for money or fame or good looks in my next life. In my next life I just want a different imagination.
Click to expand...
You really should RMA that imagination.
 
Yeah those butthole vulnerability impacts can be rough, especially when revealed.
 
PhaseNoise said:
You really should RMA that imagination.
Click to expand...

I would if I was guaranteed to get a new one. But I'd probably get a refurbished imagination sent in by some other freak. Which means that they would refurbish the imagination that I sent in and then send it back out to someone else, and there's a chance that I would run into that person in the future. And if you've been able to follow along with this line of thought, you've already realized that meeting your own refurbished imagination would be too weird.

Btw, I forgot a whole sentence in my previous post. What I meant to say was, "They'd allow physical access if it could be kept in a secure sandbox. But I am imagining a darkened club with a big sandbox next to a stage, and a bunch of unattractive businessmen sitting in it, masturbating, while a stripper on stage spins on a pole."

Having to explain your weird comments is weird, btw.


P.S. Working hard to derail this thread in the worst way possible, and I'm succeeding like Pumbaa in a mudhole. Hakuna Matata, bitches, they call me 'Mr. Pig.'
 
I always like to imagine how disappointed a hacker might be if they got into my system and discovered I don't have anytihng.
 
70 Polara said:
Similar here (see 775 system in sig), I love all of my old outdated junk!
Click to expand...

It's not really outdated when it still achieves the task it was designed to do just fine. There's plenty of modern entry level PC's/laptop's out there that struggle to achieve the task they're marketed towards, such devices should really be illegal to sell.
 
Mazzspeed said:
It's not really outdated when it still achieves the task it was designed to do just fine. There's plenty of modern entry level PC's/laptop's out there that struggle to achieve the task they're marketed towards, such devices should really be illegal to sell.
Click to expand...

No doubt on the low end junk they still sell, or machines I have seen recently still coming with 2GB and full blown Windows 10! WTF? Or machines coming with 32GB SSDs that can't even upgrade Windows 10 versions.....really WTF?

Anyways, my system in sig literally cost me less then $80 to piece together and amazes me what it's capable of. Currently playing through Metro Exodus Sam's Story and it runs just fine and I'm enjoying the game. 775 and 1366 forever.

It seems to me most of these new features such as UEFI or Intel ME sold as 'security' that just make it harder to make things 'just work' always end coming up short.
 
The thing about all these vulnerability discoveries is they seem to only pose a realistic threat to server farms and corporations. Yet, the patches are applied to everyone, including end users at home, such that everyone's performance is degraded.
 
trent51 said:
The thing about all these vulnerability discoveries is they seem to only pose a realistic threat to server farms and corporations. Yet, the patches are applied to everyone, including end users at home, such that everyone's performance is degraded.
Click to expand...
This isn't going to be an Intel CPU hardware patch, it is going to be a fix on permissions on a config file on the boot partition - shouldn't see any difference in performance afterwards.
 
I wonder if this exploit would affect a VM in the same way it would a physical machine.
 
1596557676929.png
 
You must log in or register to reply here.
Back
Top