F
Firmware Security
firmwaresecurity.com · Personal blog · on HN since 2015
Firmware Security is a link-collection blog on firmware, UEFI, ACPI, baseband, and platform security news, research, and tools.
What HN saysHN links it for firmware security references, such as Qualcomm baseband location tracking, platform security checklists, and UEFI HTTP Boot; one commenter bookmarked it as good stuff.
17HN people shared it
10linked it in comments
9stories submitted
18story points
5 years agolast shared
2015people per year2026
Most-shared posts
- 1Qualcomm iZat and baseband location tracking (2018)2 people · 1 points · first shared 2019 · discussion on HN
- 2What’s the next built-in ACPI attack?1 people · 3 points · first shared 2015 · discussion on HN
- 3Rust and UEFI1 people · 3 points · first shared 2015 · discussion on HN
- 4Monitordarkly: run code on your monitor1 people · 2 points · first shared 2017 · discussion on HN
- 5Black Hat EU Slides on Intel ME Vuln Uploaded1 people · 2 points · first shared 2017 · discussion on HN
- 6UEFI ported to RISC-V1 people · 2 points · first shared 2016 · discussion on HN
- 7Deduplication Rowhammer Windows exploitation1 people · 2 points · first shared 2016 · discussion on HN
- 8Long-term cooperation between QubesOS and Golem Project has been anounced1 people · 2 points · first shared 2017 · discussion on HN
- 9Survey of Boot security technologies1 people · 1 points · first shared 2016 · discussion on HN
- 10New uefi http boot support in uefi 2 51 people · first shared 2018
- 11Ubuntus uefi secure boot not a security measure1 people · first shared 2016
- 12Intel arm microsoft apple platform security checklists overlaps and gaps1 people · first shared 2020
- 13Google nerf non extensible reduced firmware1 people · first shared 2018
- 14Google1 people · first shared 2017
- 15Homepage1 people · first shared 2022
What HN people wrote when they linked it
bcook · 2022-04-09
https://ristovski.github.io/
https://firmwaresecurity.com/
https://blog.fpmurphy.com/
All I can find in my bookmarks right now. Good stuff though.
pabs3 · 2020-08-05
Similar tools for other architectures:
https://firmwaresecurity.com/2020/07/19/intel-arm-microsoft-apple-plat…
voodootrucker · 2019-04-14
Apple won't save you. Qualcom does this in the baseband, from what I understand:
https://firmwaresecurity.com/2018/05/18/qualcomm-izat-and-baseband-loc…
Of course the cell companies have it too, along with anyone they sell the data too. My recent work with location smart showed that verizon was the only carrier that required user consent for that.
arthurfm · 2018-06-22
> I write "images" to it in ISO format but I keep wondering how long boot media will depend on emulating a spinning CD/DVD drive.
Could UEFI HTTP Boot [1][2] replace the need to boot from ISOs?
[1] https://firmwaresecurity.com/2015/05/09/new-uefi-http-boot-support-in-…
[2] http://ipxe.org/appnote/uefihttp
josteink · 2018-03-26
> As someone who's worked in the consumer electronics industry for years, I think we desperately need to rethink our approach to Linux-based electronics with respect to both the userland and the primary application.
Google has created a stack called NERF (Non-Extensible Reduced Firmware) for this:
https://firmwaresecurity.com/2017/07/23/google-nerf-non-extensible-red…
There's a presentation about it on youtube:
https://www.youtube.com/watch?v=iffTJ1vPCSo
cyphar · 2017-10-10
Intel ME runs MINIX[1], and one of it's applications is a JVM with some things running on top. It's pretty insane.
[1]: https://firmwaresecurity.com/2017/05/07/intel-me-based-on-minix/
BuuQu9hu · 2017-01-08
Monitors still contain firmware and can be hacked:
https://firmwaresecurity.com/2016/12/12/monitordarkly-dell-monitor-on-…
chei0aiV · 2016-01-14
> Allowing Secure Boot to be bypassed is a backdoor in itself.
Like Ubuntu does?
http://firmwaresecurity.com/2016/01/07/ubuntus-uefi-secure-boot-not-a-…
jan-kleks · 2018-07-04
The dev said in one of the comments to the video:
I used EDK II framework. About the keyboard input, Program reads the value from 0x60 port directly because of multi-key input processing. I measure the timer count twice(for 1sec) by using the rdtsc instruction to make game delay more accurate. I didn't implement the audio output.
One can read in the video that it's a port of MoarNES: https://moarnes.sourceforge.io/ (0.13.8.21 alpha).
You might also be interested in:
-- CHIP-8 Emulator for UEFI: https://github.com/Openwide-Ingenierie/CHIP-8-UEFI
-- Implementing UEFI Boot to Zork: https://mjg59.dreamwidth.org/27881.html
-- Flappy Bird UEFI (there's also a video of a Street Fighter 2-like game demo there): https://github.com/hymen81/UEFI-Game-FlappyBirdy
-- Firmware Security blog UEFI games posts: https://firmwaresecurity.com/tag/game/