EFI ▪ June 2

bios

A serious vulnerability in Macs more than a year old would allow an attacker to take permanent control of the machine, retaining control even if the user reinstals OS X or reformats the drive.

The vulnerability was discovered by security researcher Pedro Vilaca, who found a way to reflash the BIOS – code stored in flash memory, not on the drive. This means that the machine remains compromised even if the hard drive is physically replaced …  expand full story

EFI ▪ December 30, 2014

firmware

A security researcher speaking at the Chaos Computer Congress in Hamburg demonstrated a hack that rewrites an Intel Mac’s firmware using a Thunderbolt device with attack code in an option ROM. Known as Thunderstrike, the proof of concept presented by Trammel Hudson infects the Apple Extensible Firmware Interface (EFI) in a way he claims cannot be detected, nor removed by reinstalling OS X.

Since the boot ROM is independent of the operating system, reinstallation of OS X will not remove it. Nor does it depend on anything stored on the disk, so replacing the harddrive has no effect. A hardware in-system-programming device is the only way to restore the stock firmware.

Apple has already implemented an intended fix in the latest Mac mini and iMac with Retina display, which Hudson says will soon be available for other Macs, but appears at this stage to provide only partial protection…  expand full story

EFI ▪ July 22, 2014

EFI ▪ June 10, 2014

EFI ▪ September 14, 2011

After releasing an EFI firmware update for the MacBook Air earlier this week, Apple has released an EFI update for both the MacBook Pro and Mac mini this afternoon. The MacBook Pro update is version 2.2 and Mac mini version 1.3, fixing compatibility issues for the upcoming Thunderbolt Display and bringing numerous Lion fixes — and adding Lion Internet Recovery on the MacBook Pro.

Hit up Software Update on your Mac to get downloading. (via The Next Web)

Submit a Tip

cancel

Submitting a tip constitutes permission to publish and syndicate. Please view our tips policy or see all contact options.

Powered by WordPress.com VIP