Comment on CrowdStrike Isn't the Real Problem

• ramble81@lemm.ee ⁨4⁩ ⁨months⁩ ago

  I didn’t say it was, nor did I say UEFI was the problem. My point was additional applications or extensions at the UEFI layer increase the attack footprint of a system. Just like vPro, you’re giving hackers a method that can compromise a system below the OS. And add that in to laptops and computers that get plugged in random places before VPNs and other security software is loaded and you have a nice recipe for hidden spyware and such.

  source