Path: csiph.com!weretis.net!feeder4.news.weretis.net!feeder5.news.weretis.net!news.solani.org!.POSTED!raspberry.therandymon.com!not-for-mail From: RS Wood Newsgroups: comp.misc Subject: Re: Can't trust EFI Date: Mon, 13 Mar 2017 21:20:20 -0400 Organization: solani.org Lines: 16 Message-ID: <87efy0veln.fsf@therandymon.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: solani.org 1489455004 20262 eJwNycERACEIA8CWjIFgOx5M+i/h3O8mBXWFUpFOa3vpggX2SnpU71k7/JzCfDru4cTqBn4NMRD7 (14 Mar 2017 01:30:04 GMT) X-Complaints-To: abuse@news.solani.org NNTP-Posting-Date: Tue, 14 Mar 2017 01:30:04 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) Cancel-Lock: sha1:RgTCHIHYMPxCfZA7U9OeVP+mC9I= sha1:AnOGO4WVTwNq3oT2MKoLBCpEIDI= X-User-ID: eJwFwQkBwEAIAzBLQGlhcu7Dv4QlhFynUlRyOK++QNQ6VvJ4KLuEpr1D6IwbXmjbm3uhnT/5cQ+t X-NNTP-Posting-Host: eJwNysERwDAIA7CVCsbEjEO5sv8Iqd4i0nJOJDO4XHSz0+T1bny7nNPUg78MSmUjE1nuMpjjAhogEB0= Xref: csiph.com comp.misc:13307 RS Wood writes: > http://www.pcworld.com/article/3179348/security/after-cia-leak-intel-security-releases-detection-tool-for-efi-rootkits.html > URL mended using a real man's™ editor. > Intel Security has released a tool that allows users to check if > their computer's low-level system firmware has been modified and > contains unauthorized code. > > The release comes after CIA documents leaked Tuesday revealed that > the agency has developed EFI (Extensible Firmware Interface) > rootkits for Apple's Macbooks. A rootkit is a malicious program > that runs with high privileges -- typically in the kernel -- and > hides the existence of other malicious components and > activities.