Daniel Maslowski orangecms

      ╮     ╭
      ⌺  ⌺  ⌺
      │╱│╱│
    ✳─⌺  ⌺  ⌺─✳
      │╱│╱│
      ⌺  ⌺  ⌺
      ╯     ╰

Abstract

We take a look at UEFI platform initialization firmware such as found on many current mainboards like laptops, desktops and servers.

Many security flaws, such as the recently discovered LogoFAIL vulnerability, expose both consumers and organizations to severe risks.

What strategies are there to find such issues, and how do we exploit them?

	[
	{
	"lang": "en-US",
	"tag-id": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2",
	"tag-version": 0,
	"software-name": "coreboot",
	"software-version": "bd34cca50aba130364f362618881693c0478a4a6",
	"version-scheme": "alphanumeric",
	"software-meta": [
	{

	oreboot 🦀 bt0
	boot mode: UART
	RISC-V arch 8000000000000007
	RISC-V core vendor: SiFive (0x0489)
	RISC-V implementation: 21G1.02.00 / llama.02.00-general (0x04210427)
	RISC-V hart ID 1
	apb0 80000000
	apb0 80000000
	DRAM: 4G: false 2G: false
	[DRAM] init start

	��SC2:BL:fb9e82;ID:0056000142A21C05;FEAT:30F:1FFE0000:B002F:1;POC:FF;RCY:0;OVD:0;DFU:0;eMMC:0;RD-0:0;CHK:0;RVK-N:8000;RVK-C:8000;RVK-A:800;RVK-C:8800;RVK-A:800;RVK-C:8800;RVK-N:8000;RVK-C:8800;SCS:0;RVK-N:00004000;RVK-C:0000c800;RVK-N:00002000;RVK-C:0000e800;
	build in ddr magic:ddr4
	OTP_LIC00 : 0f0300000000fe1f2f000b0000000000
	OTP_LIC10 : 00820700aa01fe00ff00001f00400300
	OTP_LIC20 : ffffffbf00000000c280000000000001
	OTP_LIC30 : 000000f201000000ff0200f207000000

	TE: 181407

	BL2 Built : 20:42:11, Aug 9 2021. sc2 griscure-review-sc2-bl2-08032020-120-g922477b - jenkins@walle02-sh

	U-Boot SPL 2023.04-rc2-00032-g775e48a0ca (Jul 22 2023 - 20:28:33 +0200)
	DRAM (YOLO): 256 MiB
	size=18, ptr=18, limit=100000: 4fd00000
	Boot devices:
	- FEL
	- BOOTROM
	Trying to boot from FEL
	Jump to boot ROM
	BCDEFGJ[ 0.000000] Booting Linux on physical CPU 0x0
	[ 0.000000] Linux version 6.4.0+ (dama@orangelemp) (arm-linux-gnueabi-gcc (Ubuntu 11.3.0-1ub3

	oreboot 🦀 bt0
	boot mode: UART
	RISC-V arch 8000000000000007
	RISC-V core vendor: SiFive (0x0489)
	RISC-V implementation: 21G1.02.00 / llama.02.00-general (0x04210427)
	RISC-V hart ID 1
	vout clk axi: 0x00000000
	vout clk core: 0x00000000
	vout clk ahb: 0x00000000
	vout_reset_status: 0x00000000

	From 482094ba156b7257ed88c396872e022bc299d629 Mon Sep 17 00:00:00 2001
	From: Daniel Maslowski <[email protected]>
	Date: Fri, 8 Dec 2023 21:36:37 +0000
	Subject: [PATCH] www/minio: downgrade to RELEASE.2022-10-24T18-35-07Z

	This is the tagged commit: `bd099f5e71d0ea511846372869bfcb280a5da2f6`

	Using the release timestamp and hash to identify the module (variable
	GO_MODULE)
	errors when running `make makesum`, because the Go proxy does not know

	#!/bin/bash

	# get a toolchain; the one in current Ubuntu is not suitable, so use Zephyr's
	# TOOLCHAIN_DL_BASE=https://github.com/zephyrproject-rtos/sdk-ng/releases/download
	# TOOLCHAIN_VER=v0.16.5-rc1
	# TOOLCHAIN_TAR=toolchain_linux-x86_64_riscv64-zephyr-elf.tar.xz
	# wget $TOOLCHAIN_DL_BASE/$TOOLCHAIN_VER/$TOOLCHAIN_TAR
	# tar -xf $TOOLCHAIN_TAR

	TOOLCHAIN_DIR=$(pwd)/riscv64-zephyr-elf