Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Friday October 30 2015, @01:52PM   Printer-friendly
from the users-are-up-in-ARMs dept.

Joanna Rutkowska's blog points to recent paper on a survey of the various problems and attacks presented against the x86 platform over the last 10 years. The paper does not present new exploits but does cover: the BIOS (UEFI) and booting; peripherals; the Intel Management Engine; and several other aspects of x86 insecurity. Some of the problems appear insurmountable as described.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Saturday October 31 2015, @10:59AM

    by Anonymous Coward on Saturday October 31 2015, @10:59AM (#256850)

    3) But you can reset the BIOS by pulling the cell battery

    The coin cell on your motherboard keeps your CMOS from losing its marbles.
    BIOS is a completely different chip.

    -- gewg_

  • (Score: 2) by tangomargarine on Sunday November 01 2015, @04:35AM

    by tangomargarine (667) on Sunday November 01 2015, @04:35AM (#257094)

    Complementary metal-oxide semiconductor, or CMOS, typically refers to a battery-powered memory chip in your computer that stores startup information. Your computer's basic input/output system (BIOS) uses this information when starting your computer.

    You may notice on the initial start up screen, called the POST screen, an option is available to enter the BIOS or CMOS setup. When you enter this setup area, you are entering the CMOS setup, not the BIOS setup. The BIOS chip and program cannot be updated directly by a user. The only way to update the BIOS is using a BIOS flash program called a BIOS update, which updates the BIOS to a different version.

    So it's where your BIOS settings are stored, not the BIOS itself? Which in this case is exactly what we care about--the password.

    I guess I don't follow your point. Other than perhaps being technically correct.

    --
    "Is that really true?" "I just spent the last hour telling you to think for yourself! Didn't you hear anything I said?"