exploiting Lenovo firmware, part 2B

Dear vendors, “give us your 0day vulnerability for free and don’t publish anything” — it’s not a cooperation request pic.twitter.com/l4Lk1mo1AM

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 1, 2016

I agreed to do that, but they haven't accepted my terms and conditions (just for case — I haven't asked them about money)

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 1, 2016

Lenovo is blaming it’s IBV, so, it’s 100% that there’s others OEM’s that have this vuln in their products

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 1, 2016

It seems that Lenovo released some advisory for my System Management Mode vuln (no technical details, no links): https://t.co/31rpPiHKNR

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 1, 2016