[sounds]

This is a better link (it is Intel's original blog post):

https://securingtomorrow.mcafee.com/business/chipsec-support...

It includes a few more details about what was released:

  It extracts EFI firmware from flash ROM memory
  automatically if the firmware file is not
  specified.

  We recommend generating an EFI whitelist after
  purchasing a system or when you are sure it has
  not been infected:

  # chipsec_main -m tools.uefi.whitelist -a generate

  Then check the EFI firmware on your system
  periodically or whenever you are concerned, such
  as when a laptop was left unattended:

...

An analysis of the approach they are taking would lead to some pretty easy improvements.