SoylentNews
SoylentNews is people
https://soylentnews.org/

Title    NSA Contributing Low-Level Code to Coreboot UEFI BIOS Alternative
Date    Monday June 24 2019, @11:42PM
Author    martyb
Topic   
from the deep-seated-insecurities-and-paranoia dept.
https://soylentnews.org/article.pl?sid=19/06/24/1919206

DannyB writes:

NSA Starts Contributing Low-Level Code to UEFI BIOS Alternative

The NSA has started assigning developers to the Coreboot project, which is an open source alternative to Windows BIOS/UEFI firmware. The NSA's Eugene Myers has begun contributing SMI Transfer Monitor (STM) implementation code for the x86 processor. Myers works for NSA’s Trusted Systems Research Group, which according to the agency’s website, is meant to “conduct and sponsor research in the technologies and techniques which will secure America's information systems of tomorrow.”

Myers published a paper about STM last year on how NSA’s STM implementation could work. All Coreboot code, including all the STM contributions from the NSA, are open source, so anyone could verify that there is no backdoor in there -- in theory.

In practice, the NSA could have also written the code in a less-than-secure way with vulnerabilities that are hard to detect without more experienced security researchers. Alternatively, the NSA could also update this implementation years later, when there are less eyes on the STM implementation and the update would no longer make headlines.

Better to avoid coreboot and feel secure that the hardware could never subvert my expectations of security and privacy. /s


Original Submission

Links

  1. "DannyB" - https://soylentnews.org/~DannyB/
  2. "NSA Starts Contributing Low-Level Code to UEFI BIOS Alternative" - https://www.tomshardware.com/news/nsa-contributes-low-level-stm-coreboot,39704.html
  3. "Coreboot project" - https://coreboot.org/
  4. "has begun contributing" - https://review.coreboot.org/c/coreboot/+/33234
  5. "agency’s website" - https://www.nsa.gov/What-We-Do/Research/IA-Research/
  6. "published a paper about" - https://www.platformsecuritysummit.com/2018/speaker/myers/STMPE2Intelv84a.pdf
  7. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=34636

© Copyright 2024 - SoylentNews, All Rights Reserved

printed from SoylentNews, NSA Contributing Low-Level Code to Coreboot UEFI BIOS Alternative on 2024-03-29 09:16:18