AMIBIOS Source Code i AMI's UEFI Signing Key Leaked

[Dusan K]

An FTP server in Taiwan that could be publicly accessed, leaked the source code of AMI Aptio UEFI BIOS, including AMI's unique UEFI signing test key. The utterly irresponsible act of holding such sensitive data on public FTPs is suspected to be committed by motherboard vendor Jetway. In doing so, the company may have compromised security of every motherboard (across vendors) running AMI Aptio UEFI BIOS. Most socket LGA1155 and FM2 motherboards, and some socket AM3+ motherboards run AMI Aptio.

Vise na AMIBIOS Source Code and AMI's UEFI Signing Key Leaked i American Megatrends Statement on BIOS Security Compromise via Unnamed Taiwan Vendor FTP Site

Bas me interesuje kako ce se ovo dalje razvijati 😉

 

[Corvus Corax]

Takodje. Moze biti zanimljivo. 🙂 U objavi se odmah pominju "maliciozni update-ovi", ali ja ovo vidim kao sansu da se dodaju nove mogucnosti u BIOS.

 

[ABET]

Mozda EU sud uzme ovo za olaksavajucu okolnost na mogucem buducem sudjenju Microsoftu za monopol (po ko zna koji put) 😀