Chewy to Linux@lemmy.ml • 7 months agoJust about every Windows and Linux device vulnerable to new LogoFAIL firmware attackarstechnica.comexternal-linkmessage-square103fedilinkarrow-up1368arrow-down114cross-posted to: technology@hexbear.netcybersecurity@lemmy.mlnews@lemmy.linuxuserspace.showtechnology@lemmy.worldtecnologia@feddit.clhackernews@derp.foohackernews@lemmy.smeargle.fanstechnology@lemmy.zipprivacy@lemmy.ml
arrow-up1354arrow-down1external-linkJust about every Windows and Linux device vulnerable to new LogoFAIL firmware attackarstechnica.comChewy to Linux@lemmy.ml • 7 months agomessage-square103fedilinkcross-posted to: technology@hexbear.netcybersecurity@lemmy.mlnews@lemmy.linuxuserspace.showtechnology@lemmy.worldtecnologia@feddit.clhackernews@derp.foohackernews@lemmy.smeargle.fanstechnology@lemmy.zipprivacy@lemmy.ml
minus-square@wmassingham@lemmy.worldlinkfedilink3•7 months agoIf it’s only on the ESP, it won’t persist across reinstalls, and definitely not drive swaps. But I do see mentions of attacking via firmware capsule. If that works, then yes, that will persist.
minus-squareNaNlinkEnglish3•7 months agoESP is usually not cleared on a reinstall unless somebody takes the extra step to do so. Since each OS has its own directory within the ESP their installers don’t push it. I was mostly referring to modification in firmware though.
If it’s only on the ESP, it won’t persist across reinstalls, and definitely not drive swaps.
But I do see mentions of attacking via firmware capsule. If that works, then yes, that will persist.
ESP is usually not cleared on a reinstall unless somebody takes the extra step to do so. Since each OS has its own directory within the ESP their installers don’t push it. I was mostly referring to modification in firmware though.