Re: [linux_var] Rootkit per UEFI

To: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>

Subject: Re: [linux_var] Rootkit per UEFI

From: Lorenzo Lobba <lorenzo.lobba@gmail.com>

Date: Mon, 20 Jul 2015 07:19:10 +0000

Authentication-results: linuxvar.it; dkim=pass reason="2048-bit key; unprotected key" header.d=gmail.com header.i=@gmail.com header.b=UzbnSqiB; dkim-adsp=pass; dkim-atps=neutral

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ml.linuxvar.it; s=mail; t=1437376784; bh=XrDQqsQUygwlGeZbi29NuOHIiEzPOxET6OmQ5g3jLcI=; h=References:In-Reply-To:From:Date:To:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Reply-To; z=References:=20<CAPsbc0+kvHXVNtf1wgm-Lv+xsAbrb3WOUkr=3D6=3D-zz7Y5S nLJNQ@mail.gmail.com>=0D=0A=20<CAGod1SCp3pmfzvx=3DyBK8uViQ3fSu+hEg gvHsWLA8SwVgXmQXWw@mail.gmail.com>=0D=0A=20<CACny226i+Kj0925NOcTRk Y-y8pWnWZpY=3DYxZAwwS3KYNYO4rQw@mail.gmail.com>|In-Reply-To:=20<CA Cny226i+Kj0925NOcTRkY-y8pWnWZpY=3DYxZAwwS3KYNYO4rQw@mail.gmail.com >|From:=20Lorenzo=20Lobba=20<lorenzo.lobba@gmail.com>|Date:=20Mon, =2020=20Jul=202015=2007:19:10=20+0000|To:=20linux_var=20-=20LUG=20 di=20Varese=20e=20Provincia=20Mailing=20List=20<talking@ml.linuxva r.it>|Subject:=20Re:=20[linux_var]=20Rootkit=20per=20UEFI|List-Id: =20linux_var=20-=20LUG=20di=20Varese=20e=20Provincia=20Mailing=20L ist=0D=0A=20<talking.ml.linuxvar.it>|List-Unsubscribe:=20<http://m l.linuxvar.it/cgi-bin/mailman/options/talking>,=0D=0A=20<mailto:ta lking-request@ml.linuxvar.it?subject=3Dunsubscribe>|List-Archive:= 20<http://ml.linuxvar.it/pipermail/talking/>|List-Post:=20<mailto: talking@ml.linuxvar.it>|List-Help:=20<mailto:talking-request@ml.li nuxvar.it?subject=3Dhelp>|List-Subscribe:=20<http://ml.linuxvar.it /cgi-bin/mailman/listinfo/talking>,=0D=0A=20<mailto:talking-reques t@ml.linuxvar.it?subject=3Dsubscribe>|Reply-To:=20linux_var=20-=20 LUG=20di=20Varese=20e=20Provincia=20Mailing=20List=0D=0A=20<talkin g@ml.linuxvar.it>; b=hI6qOtNyx/Xmk1YpeJ+0cIjr8k2i6e/7kxSRaq4obcLV84NdDW+Cvpk4icDvn7lnU EJkZv2OKDriKTk67pSQvO25wzIViDRIxsDDYR26mMsbbZ/Jn04qBbZ+NE4kh9NYXUr EPHn8kfGk+kPLkEn6AIGp5eO7Ft4KTouejIwTPLk=

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :content-type; bh=Gbk3yKYckickUA+E/tZKSQ5H0hlRL1K82sylcEwMoH4=; b=UzbnSqiBryIzue/H3Zk6XxcU22a3LtBorDe6LPxMa2D3/9v2Y+NNNsrrh55m2Pen6R bq7C7Vio7imktVKtWCB3aWCYuaXn7tVNT9tMo3xdCUpNwfW+BxoBIvFx47OaIIW8m5Rn B6ySqw7SKjS0pe1lTXw3AEYxc6iYLILEu924QIefnoYi8gy6lX3/mZSjl7PDk7gFVLAU xdOAe98Msu552EOHRYXWcx92Cr6HaJhtqKeu/D3As0Fn6zL4U2piCHAwW4noAHk4qPsn AajIbadQWXNxdgGFJq6Rcb5larCH/aXWsfr371hl7KMohS+g8K9IW+oCUNEm2fw+ZYru 2rfQ==

In-reply-to: <CACny226i+Kj0925NOcTRkY-y8pWnWZpY=YxZAwwS3KYNYO4rQw@mail.gmail.com>

List-archive: <http://ml.linuxvar.it/pipermail/talking/>

List-help: <mailto:talking-request@ml.linuxvar.it?subject=help>

List-id: linux_var - LUG di Varese e Provincia Mailing List <talking.ml.linuxvar.it>

List-post: <mailto:talking@ml.linuxvar.it>

List-subscribe: <http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking>, <mailto:talking-request@ml.linuxvar.it?subject=subscribe>

List-unsubscribe: <http://ml.linuxvar.it/cgi-bin/mailman/options/talking>, <mailto:talking-request@ml.linuxvar.it?subject=unsubscribe>

References: <CAPsbc0+kvHXVNtf1wgm-Lv+xsAbrb3WOUkr=6=-zz7Y5SnLJNQ@mail.gmail.com> <CAGod1SCp3pmfzvx=yBK8uViQ3fSu+hEggvHsWLA8SwVgXmQXWw@mail.gmail.com> <CACny226i+Kj0925NOcTRkY-y8pWnWZpY=YxZAwwS3KYNYO4rQw@mail.gmail.com>

Reply-to: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>

Sender: "Talking" <talking-bounces@ml.linuxvar.it>

Il giorno gio 16 lug 2015 alle ore 12:13 Marco Bevacqua <marcobev@gmail.com> ha scritto:

Sin dal primo momento in cui si è data la possibilità di aggiornare i
Bios via software, si è aperta una possibilità tecnica per
l'installazione di malware.
Uefi o non Uefi, arrivarci era solo questione di tempo..

Concordo con te.
Un conto, però, leggere queste cose su riviste, siti, blog ispecializzati.

Un altro scoprire che un'anonima aziendina lo fa veramente e che certe cose non sono solo discorsi da tecnici disadattati e paranoici.

Ciao,

Lorenzo

_______________________________________________ Talking mailing list Talking@ml.linuxvar.it http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking

References:

[linux_var] Rootkit per UEFI
- From: Lorenzo Lobba <lorenzo.lobba@gmail.com>
Re: [linux_var] Rootkit per UEFI
- From: Giovanni Orlandi <orlangio@gmail.com>
Re: [linux_var] Rootkit per UEFI
- From: Marco Bevacqua <marcobev@gmail.com>