Artwork

Content provided by Chaos Lever, Ned Bellavance, and Chris Hayner. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Chaos Lever, Ned Bellavance, and Chris Hayner or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.
Player FM - Aplicație Podcast
Treceți offline cu aplicația Player FM !

Bootstrappin' Boogie: Why Your Secure Boot Might Not Be So Secure

30:36
 
Distribuie
 

Manage episode 434390654 series 3378962
Content provided by Chaos Lever, Ned Bellavance, and Chris Hayner. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Chaos Lever, Ned Bellavance, and Chris Hayner or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

Ned and Chris explore a newly discovered flaw in UEFI Secure Boot that’s led to a critical OEM blunder that allows rootkit attacks, and the only fix is a potentially daunting firmware update.

Secure Boot’s Achilles’ Heel

Ned and Chris dive into a freshly uncovered flaw in the Secure Boot process of PCs using UEFI firmware. They trace the evolution of boot processes from ENIAC’s manual grind to today’s automated systems, highlighting the crucial role of cryptographic keys in blocking unauthorized code. Along the way, they expose a serious blunder where some OEMs carelessly included untrusted platform keys in their UEFI firmware, opening the door to rootkit attacks. The fix? A firmware update—if you’re brave enough to handle it.

Links

  continue reading

209 episoade

Artwork
iconDistribuie
 
Manage episode 434390654 series 3378962
Content provided by Chaos Lever, Ned Bellavance, and Chris Hayner. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Chaos Lever, Ned Bellavance, and Chris Hayner or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

Ned and Chris explore a newly discovered flaw in UEFI Secure Boot that’s led to a critical OEM blunder that allows rootkit attacks, and the only fix is a potentially daunting firmware update.

Secure Boot’s Achilles’ Heel

Ned and Chris dive into a freshly uncovered flaw in the Secure Boot process of PCs using UEFI firmware. They trace the evolution of boot processes from ENIAC’s manual grind to today’s automated systems, highlighting the crucial role of cryptographic keys in blocking unauthorized code. Along the way, they expose a serious blunder where some OEMs carelessly included untrusted platform keys in their UEFI firmware, opening the door to rootkit attacks. The fix? A firmware update—if you’re brave enough to handle it.

Links

  continue reading

209 episoade

Alla avsnitt

×
 
Loading …

Bun venit la Player FM!

Player FM scanează web-ul pentru podcast-uri de înaltă calitate pentru a vă putea bucura acum. Este cea mai bună aplicație pentru podcast și funcționează pe Android, iPhone și pe web. Înscrieți-vă pentru a sincroniza abonamentele pe toate dispozitivele.

 

Ghid rapid de referință

Listen to this show while you explore
Play