new Windows UEFI security protections deciphered

I believe that "UEFI Code Readonly" means EPT enforced R-X permissions for code sections of runtime phase UEFI drivers

— Dmytro Oleksiuk 💥 d_olex@mastodon.social (@d_olex) September 5, 2017

This is likely UEFI "protection flags" from WSMT. See here https://t.co/2iOoELk20G (slide 75) and WSMT spec https://t.co/aRs84cPjB2

— Yuriy Bulygin (@c7zero) September 5, 2017

"SMM security mitigations" prob indicates that UEFI fixed unprotected SMM comm buffer pointer vulns https://t.co/6Z9cyvIuVL (slides 53-76)

— Yuriy Bulygin (@c7zero) September 5, 2017

"Readonly UEFI code" probable indicates that UEFI has write protections enabled in SPI flash on that system (not sure abt NVRAM)

— Yuriy Bulygin (@c7zero) September 5, 2017