Millions of PC Motherboards Were Sold With a Firmware Backdoor

Article here

 

apparently i need to pay to read this article

 

You only get one article free.

 

TLDR: Gigabyte boards.

 

i don't like gigabyte to begin with, got burned on them pretty early on. No surprise really and glad i stayed away from their uefi line.

 

Don`t worry gurus, it is only Gigabyte`s practice, right?

 

Ufff... Gigabyte is at it again :/

 

Do we really need Whitehats to validate security before we buy anything now? TVs, PCs, consoles, phones, refrigerators, microwaves, coffee machines, etc... Jebus...

Someone should setup a review site just to test consumer products security...

The more I know, the more I appreciate the offgrid survival conspiracy theorists out there...

 

But let's not forget about MSI, they have been pwned lately and the whole security community is weary of anything downloaded from their website.

 

@anticupidon use this url instead, its the original
https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/

 

Thanks!

 

Me now, with a Gigabyte motherboard

 

The backdoor is related to having “APP Center Download & Install” feature enabled in BIOS so said feature can and should be disabled as workaround at the time.

List of affected products here:
https://eclypsium.com/wp-content/uploads/Gigabyte-Affected-Models.pdf

 

If you happen to have B550 Aorus Elite V2 rev. 1.0 or 1.1 seems you are in the clear, like me.

Aorus Elite 1.0 and Aorus Elite V2 1.2 were listed as affected.
So earlier revisions of V2 should be ok.

 

my cousins pc use one those boards. it was pre built system too

 

Carefull guys, tomorrow we may find out that Asus, MSI and other also have backdoors on their boards...


Same even say that the Pluton chip that many CPUs are starting to include, like Ryzen 7000, are also backdoors!...

 

Coreboot, where are you at?

 

I remember I was troubleshooting a friend`s laptop, and Windows Update listed "System firmware", and after download was over it went and flashed new BIOS right in front of my eyes - just like that - I was utterly impressed!

 

Well, i`m not impressed and i don`t want an OS messing with the BIOS like that!

 

yet another bugged firmware override tool. if you don't use it you should be fine

happened basically to every brands, both desktop and laptop, in the past.