Fix it yourself

More documents

Recommendations

Info

Test Results: CHIPSEC 34 - PR registers set to WP the whole BIOS except NVRAM OK - PR registers are reset to zero after S3 FAIL - S3 BootScript is located outside SMRAM, not protected from any changes, has numerous DISPATCH opcodes FAIL - SMM_BWP is not set, NVRAM region is protected only by BLE/BIOS_WE FAIL - “Setup” variable has RT flag FAIL
Test Results: UEFITool 35 - BIOS has Capsule flash services, Insyde IHISI flash interface, Intel PFAT flash driver, SecureFlash driver MISTRUST - has WPBT 7 driver, the firmware can automatically install and run Windows executables MISTRUST - has UnlockPwd driver, the attacker can override BIOS Setup password w<strong>it</strong>h Acer’s tech support help MISTRUST - BIOS Setup password is stored as cleat text FAIL [7] http://download.microsoft.com/download/8/a/2/8a2fb72d-9b96-4e2d-a559-4a27cf905a80/windowsplatform-binary-table.docx
Page 1 and 2: Fix it yourself detecting and fixin
Page 3 and 4: Agenda 1 - Brief Intro to (U)EFI -
Page 5 and 6: Brief Intro to (U)EFI: What is it?
Page 7 and 8: Brief Intro to (U)EFI: SEC concepts
Page 9 and 10: Brief Intro to (U)EFI: DXE concepts
Page 11 and 12: What an Attacker Can Do? 9
Page 13 and 14: What an Attacker Can Do: A quote 11
Page 15 and 16: Attack Vectors: SPI flash chip 13 -
Page 17 and 18: Attack Vectors: S3 BootScript 15 -
Page 19 and 20: Attack Vectors: BIOS Setup 17 - can
Page 21 and 22: Attack Vectors: Vendor-specific 19
Page 23 and 24: Protections: SPI flash 21 - read-on
Page 25 and 26: Protections: S3 BootScript 23 - the
Page 27 and 28: Protections: BIOS settings 25 - the
Page 29 and 30: An Average System 27
Page 31 and 32: Test Tools 29
Page 33 and 34: Test Tools: UEFITool 31 - open sour
Page 35: Test Results 33
Page 39 and 40: What Now? 37
Page 41 and 42: Prepare to Dig Deep 39
Page 43 and 44: Prepare to Dig Deep: POST card 41 -
Page 45 and 46: Prepare to Dig Deep: Quanta ZQX pin
Page 47 and 48: Prepare to Dig Deep: SPI emulator 4
Page 49 and 50: Fix It Yourself 47
Page 51 and 52: Fix It Yourself: EmuVariable driver
Page 53 and 54: Fix It Yourself: Set PR registers 5
Page 55 and 56: Fix It Yourself: Decompile DSDT 53
Page 57 and 58: Fix It Yourself: Patch S3 setup han
Page 59 and 60: Fix It Yourself: PreventS3Pei drive
Page 61 and 62: Fix It Yourself: Generate PK 59 - P
Page 63 and 64: Fix It Yourself: Generate db 61 - d
Page 65 and 66: Fix It Yourself: Enable SecureBoot
Page 67 and 68: Fix It Yourself: Remove other stuff
Page 69 and 70: Conclusion: Summary 67 - PC is stil
Page 71 and 72: Conclusion: What else? 69 - try to

Fix it yourself

Create successful ePaper yourself

Delete template?

Save as template?