Hacker News

points by octoberfranklin 2 days ago | 0 comments

Yeah but that just lets them replace the OS that gets booted.

This gives the attacker access at the UEFI level and above -- they can use it to produce false attestations.

[–] vintermann 2 days ago

Do any of the locked down consoles or phones use a vulnerable UEFI implementation by any chance?

[–] mschuster91 2 days ago

Phones most commonly use their own bootloader stack.

[–] mjg59 2 days ago

UEFI is pretty common on phones now, but it's unlikely that any of them are running this network stack there.

[–] fn-mote 1 day ago

Exactly. No phones have PXE boot enabled, regardless of the rest.

[–] yjftsjthsd-h 2 days ago

Is it? I'd like a UEFI phone booting GNU/Linux but last I looked it was a bunch of hacky aftermarket firmwares.

PS your profile links a blog that says you moved

[–] mjg59 2 days ago

It being UEFI doesn't mean it's a standard platform, there's no ACPI and you're going to need a custom kernel that targets that specific device. UEFI alone isn't enough to support booting a generic OS.

And thanks! Updated my profile.