- No guarantees, explicit or implied. This is a news blog, containing news and information regarding firmware security, including cited and linked content. Citations and links are the responsibility (and copyright) of the original authors! Be very careful working with firmware. You can render your entire system unusable. Firmware security IS IMPORTANT. Some basic best practices include:
- Back. Up. Your. Data. Always.
- If you have a fleet of identical machines, canary test on a single example first, then on a subset, before deploying to the entire fleet.
- Remove machines from production before doing firmware security testing or firmware updates. Expect reboots for firmware updates.
- If you are not working with a fleet, make sure you have a secondary machine in good working order before working with firmware on your primary machine. You may need the secondary machine to get online and get assistance fixing the primary machine! Not to mention your regular daily activities.
- Consider your warranty status, and how it relates to your ability to get regular work done on hardware needed for work! Some consumer retail extended warranties are a rip-off, but for business / enterprise class hardware, you can purchase extended warranties and even on-site support, even if the original warranty has expired. This may be more affordable than having multiple spare machines.
- Affiliate links are in use on this blog, and will be clearly marked as such.
- This blog is sponsored (and written!) by PreOS Security. We do not and will not create or post any sponsored content, or “native advertising.“
- We do not plan on ever adding ads.
- We do use tracking for our own statistics.
- We WILL use affiliate links.
- Affiliate links will rarely (maybe never) constitute a wholehearted recommendation for a given product. In firmware security so far our experience has been that no product is perfect, or even fully compliant with NIST standards.
- PreOS Security may make a small amount of money when you click on an affiliate link and make a purchase.
- You should never pay or expect to pay any more as the result of clicking on an affiliate link.