Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Sunday March 12 2017, @07:08AM   Printer-friendly
from the responded-quickly dept.

Submitted via IRC for chromas

Intel Security has released a tool that allows users to check if their computer's low-level system firmware has been modified and contains unauthorized code.

The release comes after CIA documents leaked Tuesday revealed that the agency has developed EFI (Extensible Firmware Interface) rootkits for Apple's Macbooks. A rootkit is a malicious program that runs with high privileges -- typically in the kernel -- and hides the existence of other malicious components and activities.

The documents from CIA's Embedded Development Branch (EDB) mention an OS X "implant" called DerStarke that includes a kernel code injection module dubbed Bokor and an EFI persistence module called DarkMatter.

EFI, also known as UEFI (Unified EFI), is the low-level firmware that runs before the operating system and initializes the various hardware components during the system boot process. It's the replacement for the older and much more basic BIOS in modern computers and resembles a mini operating system. It can have hundreds of "programs" for different functions implemented as executable binaries.

A malicious program hidden inside the EFI can inject malicious code into the OS kernel and can restore any malware that has been removed from the computer. This allows rootkits to survive major system updates and even reinstallations.

Source: http://www.pcworld.com/article/3179348/security/after-cia-leak-intel-security-releases-detection-tool-for-efi-rootkits.html


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Informative) by Anonymous Coward on Sunday March 12 2017, @06:39PM

    by Anonymous Coward on Sunday March 12 2017, @06:39PM (#478138)

    What you are seeing is a narcissistic meltdown. I have been following Ollie Matthews https://www.youtube.com/user/mattshsq [youtube.com] on youtube for the past month or two. He lays out exactly what a narcissist is. How they gaslight you and how they react when they are cut off.

    He is trying to create a situation where you feel sorry for him. Where you have to tip-toe around them and say what they like. Even down to how you address him. Then also attacking GNU to show how much better they are. It looks crazy because it is.

    Our profession as programmers lends very easily to this mentality. I know I have it. That we are 'the chosen' ones to lead the world to a better place. It can be a bitter pill to swallow that there are others much more capable and friendly enough to pull something like this off. When criticized we become very belligerent and usually double down on whatever silly BS we are pushing that day.

    The free software movement is full of people like this. People looking to run a project and gaslight you into thinking only they can do this. For example the ntp fiasco from a few months ago. It was basically 3 of them clashing. The owner and the two trying to cut his project off. He had the actual power as he actually did things. The other two are looking for a project to 'save'. Or even hell the initd/systemd junk. This is not Poetterings first fiasco he has ruined. It will not be his last. Linux has for a long time needed something like systemd instead we ended up with a monster of ill defined services all smashed together. He will not budge on it. He has control and has enough supporters to crush you like a bug if you disagree. Free software almost invites this sort of mentality. It strokes the ego of whoever it is making the package that they are 'the best'. We begrudgingly let this go on because we benefit from it. Then many times when the inevitable meltdown happens we get out the popcorn and watch.

    Starting Score:    0  points
    Moderation   +2  
       Insightful=1, Informative=1, Total=2
    Extra 'Informative' Modifier   0  

    Total Score:   2