Hacker News new | ask | show | jobs
by totony 3291 days ago
I second this, usually bios updates are signed

you could always check if there is a signature with binwalk or smtg if it makes you feel safer

1 comments

I did run an older version of binwalk on the firmware image, but it was unable to unpack anything and only printed false positives. I have now tried the newest version and it's able to unpack everything and display a lot of information. The PE modules in UEFI seems to be signed as these signatures are found many times:

  Certificate in DER format (x509 v3)
  SHA256 hash constants, little endian
Very interesting to dig around in the firmware, I even found the boot splash image. Definitely a time sink, but fun.