Thanks, this is interesting... I'd emphasize to others here that this concerns firmware updates, not just the usual bloatware offerings.

It stills surprises me constantly that most semi-respected taiwanese motherboard manufacturers, still don't offer signed downloads, and many still use standard ftp even with no encryption, usually from a global server after a re-direct.

This trend of hardware attacks is only going to get worse until a major public accident or event results, and people die it would seem.

Not critically worried about a device I can just turn off. Imagine your self-drive Tesla (or whatever car) update is infected and not known ... then they literally have an army of 1 billion cars ready for war at the push of a button.

Batman:

 

https://www.tomsguide.com/us/chinese-hackers-asus-kaspersky,news-29722.html

 

think you could post some content instead of just a link dump?

gzt: Anyone using a manufacturer's image and a manufacturer's update service is double crazy.

gzt: Anyone using a manufacturer's image and a manufacturer's update service is double crazy.

Do I detect sarcasm or are you seriously suggesting people can just roll their own UEFI bios or peripheral ROM code? What would you suggest?

Open platform firmwares only work on a tiny subset of chipsets currently, and ones that more often than not are at least ten years old like the Intel ICH9 series.

Batman:

Not critically worried about a device I can just turn off. Imagine your self-drive Tesla (or whatever car) update is infected and not known ... then they literally have an army of 1 billion cars ready for war at the push of a button.

nathan:

gzt: Anyone using a manufacturer's image and a manufacturer's update service is double crazy.

Downright lunatic here, using a Surface and Windows Update

gzt:

nathan:

gzt: Anyone using a manufacturer's image and a manufacturer's update service is double crazy.

Downright lunatic here, using a Surface and Windows Update

Windows Operating system updates - different ; ). OEM was the word I should have used instead of manufacturer.

dc2daylight:

gzt: Anyone using a manufacturer's image and a manufacturer's update service is double crazy.

Do I detect sarcasm or are you seriously suggesting people can just roll their own UEFI bios or peripheral ROM code? What would you suggest?

Open platform firmwares only work on a tiny subset of chipsets currently, and ones that more often than not are at least ten years old like the Intel ICH9 series.