exploiting Lenovo firmware, part 2C

For non Windows it means flash write protection bypass: attacker can install firmware rootkit from running OS

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 5, 2016

, to be deadly honest, SMM security is not relevant at all on non-Dell/HP/Lenovo desktops, just because of no BIOS security at all.

— Nikolaj Schlej (@NikolajSchlej) July 5, 2016

Intel provided reference code with this vulnerability to IBV, IBV provided it’s SDK to OEM

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 5, 2016

UEFI exploit readme was updated: https://t.co/8pZgtuFVVs ThinkPwn comes to desktops 😈

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) July 5, 2016