Meta tags:

Headings (most frequently used words):

uefi, the, 2018, april, bios, and, wednesday, june, sunday, 2017, anniversary, plugfest, 26, 2019, 29, saturday, 21, thursday, 05, 01, friday, august, 04, 07, harnessing, shell, beyond, blog, archive, contributors, insyde, is, hiring, engineers, 20, year, cih, virus, oft, rumored, death, of, csm, prophesied, again, by, intel, spring, presentations, now, available, repository, for, misc, code, posted, here, notes, cs2ai, zimmer, post, so, what, does, security, in, iot, with, really, look, like, releases, new, specifications, adds, arm, to, board,

Text of the page (most frequently used words):
the (114), and (58), uefi (47), that (31), for (23), bios (21), security (19), are (14), with (14), has (13), this (13), was (13), firmware (12), lewis (11), posted (11), intel (11), csm (11), april (10), now (10), support (10), tim (9), about (9), you (9), code (9), #insyde (8), labels (8), arm (8), like (8), there (8), here (8), plugfest (8), october (7), june (7), 2018 (7), what (7), but (7), comments (7), presentations (7), have (7), september (6), august (6), shell (6), from (6), new (6), more (6), hardware (6), some (6), out (6), will (6), they (6), legacy (6), dos (6), march (5), 2017 (5), hiring (5), standards (5), other (5), industry (5), http (5), www (5), org (5), zimmer (5), cs2ai (5), over (5), how (5), tools (5), boot (5), not (5), eisa (5), would (5), great (5), because (5), microsoft (5), don (5), may (4), december (4), january (4), older (4), acpi (4), been (4), few (4), years (4), where (4), test (4), sites (4), default (4), files (4), resources (4), pdf (4), vincent (4), tor (4), dark (4), chipsec (4), had (4), one (4), his (4), using (4), available (4), your (4), computer (4), focused (4), can (4), job (4), recent (4), anniversary (4), these (4), systems (4), low (4), lot (4), windows (4), software (4), july (3), november (3), february (3), engineers (3), blog (3), latest (3), programming (3), who (3), past (3), also (3), level (3), effort (3), same (3), senior (3), models (3), including (3), kali (3), net (3), related (3), good (3), experience (3), then (3), stuff (3), often (3), issues (3), professionals (3), get (3), environment (3), even (3), why (3), company (3), open (3), platforms (3), isa (3), many (3), presentation (3), which (3), talk (3), when (3), all (3), version (3), our (3), micropython (3), testing (3), last (3), python (3), know (3), virus (3), cih (3), engineer (3), 2019 (2), posts (2), sct (2), dong (2), wei (2), anyone (2), working (2), decided (2), interest (2), x86 (2), world (2), improving (2), specifications (2), while (2), architecture (2), both (2), spec (2), tool (2), smm (2), called (2), another (2), changes (2), onto (2), board (2), adds (2), wednesday (2), defcon (2), news (2), attacks (2), colleagues (2), vulnerabilities (2), detect (2), exploits (2), used (2), always (2), features (2), them (2), use (2), making (2), system (2), target (2), two (2), step (2), analysis (2), second (2), lecture (2), under (2), hack (2), see (2), much (2), keep (2), first (2), after (2), track (2), again (2), source (2), post (2), currently (2), naturally (2), languages (2), than (2), well (2), presented (2), development (2), lifecycle (2), requirement (2), traditionally (2), its (2), obscurity (2), their (2), include (2), access (2), publicly (2), just (2), time (2), sunday (2), phoenix (2), mark (2), doran (2), linaro (2), ami (2), topic (2), list (2), operating (2), processes (2), into (2), nvme (2), qemm (2), flight (2), simulator (2), sometimes (2), death (2), since (2), pieces (2), compatibility (2), era (2), those (2), lake (2), devices (2), manufacturing (2), die (2), barriers (2), remember (2), people (2), companies (2), year (2), certain (2), manufacturers (2), oses (2), validate (2), big (2), area (2), between (2), free (2), built (2), port (2), little (2), risk (2), line (2), flash (2), chip (2), jobs (2), sales (2), positions (2), interested (2), potential (2), applicants (2), please (2), refer (2), posting (2), website (2), skip (2), class, statcounter, shannon, brahms, contributors, 2006, 2007, 2009, 2010, 2011, 2012, 2013, 2014, 2016, archive, beyond, edition, harnessing, subscribe, atom, home, comment, specification, should, surprise, hear, shows, growth, non, recognizes, outstanding, vice, president, returns, role, director, platform, seems, smart, move, sides, announcement, came, heels, release, spate, revisions, whole, bunch, goodies, wifi, bluetooth, trustzone, rumblings, works, specs, happenings, later, testtools, acpi_6_2, pi_spec_1_6, uefi_spec_2_7, welcome, directors, releases, vmware, usual, continues, dominate, several, overview, discussed, included, friend, analyzing, reported, discusses, researcher, alex, matrosov, improperly, configured, chipsets, deal, still, ignorant, types, cyber, kits, coming, safely, without, rich, recently, sacramento, hosted, lectures, giving, nuts, bolts, setting, own, virtual, machines, configuring, cheap, raspberry, such, password, hash, crackers, close, sparta, wireshark, network, introduction, venture, costs, buy, care, next, month, wireless, sniff, today, lifespan, hours, maybe, months, secure, duration, described, specific, reading, does, iot, really, look, friday, sdl, gentle, ribbing, plug, fest, bellevue, try, trends, collaborator, book, thoughts, long, history, within, community, lower, barrier, entry, server, design, record, yoo, micro, efi, pie, side, note, competing, acronym, pronunciations, early, days, extended, bus, pointed, english, speakers, pronounced, eee, european, pronounce, exactly, opposite, meanwhile, front, organizations, doing, bring, reality, college, students, example, chapters, worldwide, zeroes, control, present, unique, challenges, excellent, afterwards, seattle, week, brought, host, process, disciplines, becoming, attention, getting, hackers, academics, raising, interesting, business, margin, assumed, made, priority, team, threat, expanded, attackers, physical, become, impacts, meltdown, spectre, notes, svn, reminder, checked, sourceforge, guarantees, repository, misc, head, variety, topics, although, dominates, top, notch, redacted, live, contained, details, unreleased, versions, asl, adapting, based, ongoing, conversations, afterward, showed, introducing, worried, discipline, rounding, state, illustrious, smbios, table, construction, edk2, capsule, update, language, spring, thursday, shel, pharlap, feel, discussions, thus, somewhat, akin, prophesying, return, christ, promise, gleam, itanium, eye, stated, provide, silicon, needed, delivering, starting, ship, 2020, module, portion, delivers, surprisingly, bit, assembly, looks, sort, someone, took, gutted, attached, limbs, torso, keeping, chipset, generations, current, cannon, coffee, generation, option, roms, video, nic, raid, various, run, relies, question, isn, dang, need, actually, innovation, let, mile, removing, fall, brian, richardson, corporation, retrieved, brian_richardson_intel_final, hand, bastion, said, stink, qemu, hard, reproduce, something, forced, necessary, histories, did, things, mean, removed, certainly, fact, tons, handling, dual, options, appear, setup, permit, user, choose, auto, complexity, throughout, rid, simplify, usb, come, along, added, though, never, designed, want, duplicate, caused, pushed, shared, simplification, required, replace, intrinsic, requirements, feeling, idea, ignored, commands, favor, trying, apppkg, efforts, think, work, command, prompt, diskpart, printf, overhead, putting, diagnostic, application, freedos, incarnation, third, scripts, around, introduces, makers, averse, sticking, point, before, adopted, standard, install, hidden, building, shipping, box, oft, rumored, prophesied, saturday, noted, 26th, marked, chernobyl, deliberately, attack, contents, containing, part, motherboards, inoperable, write, protect, easily, disabled, knew, known, sequence, author, correctly, concludes, rely, through, oems, vendors, guilty, assuming, obscure, bother, data, valuable, cost, disassembling, purchasing, longer, safe, assumption, article, looking, qualified, field, position, any, candidates, resumés, sent, hashtag, com, commentary, sidebar, main,

Text of the page (random words):
uefi skip to main skip to sidebar uefi uefi news and commentary wednesday june 26 2019 insyde is hiring bios engineers my company insyde software is hiring both for senior firmware engineer and sales engineer positions insyde software is hiring we currently have open positions for senior bios firmware engineers if you are interested or know of potential applicants please refer to the job posting on our website insyde software is hiring we are looking for qualified applicants for a field sales engineer position if you are interested or know of any potential candidates please refer to the job posting on our website resumés can be sent to jobs us insyde com hashtag posted by tim lewis at 2 16 pm no comments labels jobs sunday april 29 2018 20 year anniversary the cih virus and the bios as noted in this article april 26th marked the anniversary when the cih or chernobyl virus would deliberately attack the contents of the flash chip containing the bios part on certain motherboards making those systems inoperable the write protect line on the flash chip was easily disabled if you knew the little known access sequence as the author correctly concludes don t rely on security through obscurity oems and bios vendors are sometimes guilty of assuming that bios code is so obscure that no one will bother but in an era where the data on the computer is so much more valuable than the cost of disassembling or purchasing the code that is no longer a safe assumption posted by tim lewis at 3 45 pm no comments labels cih security virus saturday april 21 2018 the oft rumored death of uefi s csm prophesied again by intel sometimes i feel like discussions about the death of the csm and thus legacy os support in bios to be somewhat akin to prophesying the return of christ this has been the promise of uefi since it was just a gleam in intel s itanium eye now intel has publicly stated that they will not provide the related silicon pieces needed for delivering csm in bios starting with platforms that ship in 2020 the csm compatibility support module is the portion of the uefi bios that delivers support for older operating systems including dos and surprisingly windows 7 the 16 bit x86 assembly looks sort of like someone took a 90 s era bios gutted it and attached the limbs to the uefi torso 1 for those of you keeping track that would be two chipset generations from the current cannon lake coffee lake generation this would include legacy option roms for devices like video nic raid and me as well as various testing and manufacturing tools that run under dos which relies on the csm windows 7 is a big sticking point since was the last version before windows 10 adopted by many companies as their standard install version but dos is a hidden requirement that few people know or talk about because they don t use dos but the manufacturers do when they are building testing and shipping the box why dos first it is a low overhead environment putting few barriers between a testing or diagnostic application and the hardware second it is free in its freedos incarnation third because they have years of experience using it with scripts test tools and processes all built around it changes in this area introduces risk on the manufacturing line and computer makers are risk averse intel would like to replace dos with the uefi shell it has many of the same intrinsic features free low hardware requirements my feeling is that the uefi shell is a great idea but a lot of recent effort has ignored improving the built in shell commands in favor of trying to support python see apppkg s python port or more recent efforts to support micropython python is great but i think that a little more work to port some command prompt standards like printf and diskpart or what will it mean for bios manufacturers if the csm and support for legacy oses is removed certainly the fact that we don t have to test and validate tons of older out of support oses also there is a lot of code for handling the dual boot options that appear in setup that is we permit the user to choose legacy boot uefi boot or auto detect this adds a lot of complexity throughout the boot code get rid of that and we can simplify the other big area is hardware support even as new hardware standards like usb 3 and nvme have come along support for these devices had to be added to the csm even though the csm was never designed to support this oh and we don t want to duplicate code which has often caused code to be pushed into smm so that it can be shared between legacy and uefi os all of these to a simplification of the bios code and the effort required to validate it on the other hand bios has always been the last bastion of compatibility with older standards as i ve often said bios is where industry standards go to die and then they stink anyone remember eisa qemm not qemu and using flight simulator as a bios test the csm was one of the pieces of firmware that was hard to reproduce in bios something that forced people to talk to us because there are few software companies with the necessary 30 year histories to remember why we did certain things what will we do now that is the question isn t it what will we do now dang now that we don t need to do csm we actually have time to do some more innovation so go on let it die 1 last mile barriers to removing legacy bios fall 2017 uefi plugfest october 2017 brian richardson intel corporation retrieved from http www uefi org sites default files resources brian_richardson_intel_final pdf on 4 21 2018 posted by tim lewis at 2 53 pm no comments labels csm eisa flight simulator micropython pharlap qemm uefi uefi shel thursday april 05 2018 spring 2018 uefi plugfest presentations now available head here to get the latest uefi plugfest presentations on a variety of topics although security dominates the topic list with top notch presentations by insyde intel and here arm phoenix and microsoft the presentation by microsoft is a redacted version of what was presented live because it contained details about unreleased versions of the windows operating systems after security it was programming languages with presentations by intel for acpi source language asl and micropython my presentation focused on adapting microsoft s security development lifecycle to uefi and firmware based on our ongoing experience at insyde conversations afterward showed a great level of interest in introducing these processes into an industry that has traditionally not worried about this level of discipline in security rounding out the topic list was the state of uefi the illustrious mark doran intel smbios and acpi table construction arm edk2 platforms linaro uefi capsule update microsoft and nvme ami posted by tim lewis at 8 42 am no comments labels ami arm intel linaro mark doran microsoft phoenix security uefi plugfest sunday april 01 2018 repository for the misc uefi code posted here just as a reminder all of the code that s been posted here over time is checked in over at sourceforge here no guarantees posted by tim lewis at 4 51 pm no comments labels svn uefi notes cs2ai uefi plugfest and the zimmer anniversary post after some gentle ribbing from colleagues at the uefi plug fest in bellevue wa i ve decided to try to keep track of recent trends in uefi here again my collaborator on the uefi shell book vincent zimmer has posted some thoughts on open source and open platforms in his anniversary blog post here he has a long history within the uefi community and is currently working to lower the barrier of entry to server firmware design and for the record it is u e f i not yoo fi or micro efi and a c p i not ak pie on a side note about competing acronym pronunciations in the early days of the eisa extended isa bus architecture it was pointed out that while english speakers naturally pronounced eisa as eee sa and isa as ay sa other european languages had would naturally pronounce it exactly opposite eisa as ay sa and isa as ee sa meanwhile on the firmware security front some focused industry organizations are doing a great job of bring the reality of these issues to professionals and college students for example cs2ai with more than 15 chapters worldwide zeroes in on control systems and how they present unique challenges for security as well as the recent impacts of the meltdown and spectre with excellent q a afterwards the uefi plugfest in seattle this past week brought a host of security related presentations i presented on uefi and the security development lifecycle many of the same process disciplines are becoming a requirement in the bios world because of the attention bios security is now getting from hackers academics and professionals this is also raising interesting business issues for a low margin industry that has traditionally assumed its obscurity made it a low priority target intel s chipsec team had a great presentation on how their threat models have now expanded to include attackers who have physical access to the hardware there was a lot of other good stuff which i ll talk about when the presentations become publicly available posted by tim lewis at 4 46 pm no comments labels chipsec cs2ai plugfest sdl uefi vincent zimmer friday august 04 2017 so what does security in iot with uefi really look like as usual security continues to dominate the news about uefi defcon had several presentations related to firmware security there is a good overview of the hardware and firmware attacks discussed over at dark reading this included one by my friend vincent zimmer and his colleagues at intel analyzing over 90 reported firmware vulnerabilities over the past 3 years he discusses his experience on his blog another by security researcher alex matrosov described exploits and called out specific computer models then there was some stuff on using chipsec to detect improperly configured chipsets as often as i deal with security issues in firmware i am still ignorant of how the types of exploits that are available and the tools that are used by cyber security professionals there are always new kits coming out with new features but where do you get them and how do you use them safely without making you and your computer system a target rich environment recently the cs2ai of sacramento hosted two lectures the first lecture focused on giving the nuts and bolts step by step of setting up your own environment including virtual machines tor and kali and even configuring a cheap raspberry pi as an analysis tool the second lecture focused on the tools available under kali such as password hash crackers with an up close hack that used it sparta and wireshark for network analysis and then an introduction to using tor to venture onto the dark net with tor why the dark net so that you can see how much it costs to buy a hack of your company or a company that you care about next month will be wireless attacks and the tools that sniff out vulnerabilities good stuff security today has a lifespan in hours or maybe in months or years my firmware job is to keep your system secure for the duration of one boot posted by tim lewis at 10 15 pm no comments labels chipsec cs2ai dark net defcon kali tor vincent zimmer vmware wednesday june 07 2017 uefi releases new specifications and adds arm to the board for anyone who has been working on the uefi specification for the past few years it should be no surprise to hear that uefi has decided to welcome arm onto the board of directors this shows the growth of interest in firmware standards by the non x86 world and also recognizes arm s outstanding level of effort to improving the specifications dong wei who was the vice president of uefi while at hp now returns to the same role but now from arm where he is the senior director platform architecture this seems like a smart move on both sides this announcement came on the heels of the release of a spate of new spec and test tool revisions there are a whole bunch of goodies in here from wifi and bluetooth to new smm now called mm models including trustzone uefi spec v2 7 http www uefi org sites default files resources uefi_spec_2_7 pdf pi v1 6 http www uefi org sites default files resources pi_spec_1_6 pdf acpi v6 2 http www uefi org sites default files resources acpi_6_2 pdf sct v2 5a http www uefi org testtools there are rumblings about another uefi plugfest in the works more on what s changes in the specs and other industry happenings later posted by tim lewis at 11 09 am 1 comment labels acpi arm dong wei pi sct uefi older posts home subscribe to posts atom harnessing the uefi shell latest edition for uefi shell programming beyond bios what s the latest on uefi programming blog archive 2019 1 june 1 insyde is hiring bios engineers 2018 5 april 5 2017 12 august 1 june 2 may 1 april 2 march 4 february 1 january 1 2016 5 december 1 november 2 october 2 2014 9 october 1 september 1 august 2 june 2 april 2 january 1 2013 41 october 7 september 15 august 12 july 3 june 3 march 1 2012 33 december 2 november 4 october 5 september 5 august 4 july 2 june 4 may 2 march 2 february 3 2011 3 september 1 august 2 2010 13 may 1 april 1 march 3 february 4 january 4 2009 14 december 1 november 2 october 6 september 5 2007 1 january 1 2006 15 december 3 october 1 september 4 july 2 may 2 april 1 march 2 contributors brahms lewis shannon lewis tim lewis class statcounter