[coreboot] uefi rootkit (lojax)

[s***@gmail.com]

hi all! :)

ive just found this, and thought that it can be valuable info for the
people around:

https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/

(i hope it wont disturb anyone here, as its near to be offtopic)

all the bests for all of you! :)

[Ivan Ivanov]

Thank you for the info! However we are not affected thanks to
coreboot's default payload being SeaBIOS. If anything, these "uefi
rootkit" news could be used to promote the coreboot(+SeaBIOS) project
to wider audiences

Ivan

Post by s***@gmail.com
hi all! :)
ive just found this, and thought that it can be valuable info for the
https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
(i hope it wont disturb anyone here, as its near to be offtopic)
all the bests for all of you! :)
--
https://mail.coreboot.org/mailman/listinfo/coreboot

[Matt DeVillier]

Post by Ivan Ivanov
Thank you for the info! However we are not affected thanks to
coreboot's default payload being SeaBIOS. If anything, these "uefi
rootkit" news could be used to promote the coreboot(+SeaBIOS) project
to wider audiences

that's a pretty myopic view of coreboot and its users; coreboot
supports 2 different UEFI payloads, which are used by both individual
and commercial entities.

Post by Ivan Ivanov
Ivan

Post by s***@gmail.com
hi all! :)
ive just found this, and thought that it can be valuable info for the
https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
(i hope it wont disturb anyone here, as its near to be offtopic)
all the bests for all of you! :)
--
https://mail.coreboot.org/mailman/listinfo/coreboot

--
https://mail.coreboot.org/mailman/listinfo/coreboot

[Ivan Ivanov]

Post by Matt DeVillier
that's a pretty myopic view of coreboot and its users; coreboot
supports 2 different UEFI payloads, which are used by both individual
and commercial entities.

It is nice to hear there are possible alternatives ; to be honest I
don't know about their "marketshare" amoung the coreboot users. From
my point of view as a user (reading mailing lists etc.) it seemed like
the majority of coreboot users are using SeaBIOS and the majority of
libreboot users are using GRUB. Although, its' quite likely that at
the same time the majority of ChromeBook+coreboot users are really
running UEFI payload, thanks to your customized coreboot builds where
you are using it (learned about your work after a quick search)

P.S. sorry it seems I bumped an old thread and now I feel guilty

Ivan

Post by Matt DeVillier

Post by Ivan Ivanov
Thank you for the info! However we are not affected thanks to
coreboot's default payload being SeaBIOS. If anything, these "uefi
rootkit" news could be used to promote the coreboot(+SeaBIOS) project
to wider audiences

that's a pretty myopic view of coreboot and its users; coreboot
supports 2 different UEFI payloads, which are used by both individual
and commercial entities.

Post by Ivan Ivanov
Ivan

Post by s***@gmail.com
hi all! :)
ive just found this, and thought that it can be valuable info for the
https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
(i hope it wont disturb anyone here, as its near to be offtopic)
all the bests for all of you! :)
--
https://mail.coreboot.org/mailman/listinfo/coreboot

--
https://mail.coreboot.org/mailman/listinfo/coreboot

[ron minnich]

Post by Ivan Ivanov
It is nice to hear there are possible alternatives ; to be honest I
don't know about their "marketshare" amoung the coreboot users. From
my point of view as a user (reading mailing lists etc.) it seemed like
the majority of coreboot users are using SeaBIOS and the majority of
libreboot users are using GRUB.

The majority of coreboot users are using chromeos verified boot :-)

Post by Ivan Ivanov
P.S. sorry it seems I bumped an old thread and now I feel guilty

not a problem!

ron