Tootfinder

RE: #firmware, and a good bunch like some fun, while your potential…

I can see the CA hashes that #Intel publishes in their AMT docs also in the MFS in my #firmware samples. This one is from a ThinkPad X230, so it's version 8.x.

I'll be running a hands-on two-hour workstop on #firmware analysis at #DO_BYTE: https://fahrplan.do-byte.de/do-byte-20

This is so awesome to see!
#Lenovo #firmware engineers are looking into both @… and

Open Source Summit India 2026: An Introduction To Coreboot and LinuxBoo...
View more about this event at Open Source Summit India 2026

At this year's Open Source #Firmware #Conference, I will be presenting on "Boot Chains and Build Systems"! 🥳🥳
(spoiler: it's complicated 🫠)

Boot Chains and Build Systems Open Source Firmware Conference 2026
It is clear that booting a system based on an application processor requires multiple binaries and possibly multiple hardware components - at the very least, one to initialize the DRAM and one to run in it. This implies that the various components of the chain, however many, need to be aware of the respective next and previous one somehow: Any component has to know the source, the protocol, and the destination for loading the next one, and the build system needs to create an overall image for t…

We have successfully restored a laptop's #firmware today at DO_BYTE.
The flash part is a WSON, so a pogo pin adapter was necessary, and I had one and brought it today.
Within less than 10 minutes, the procedure was done.
Happy to see another #laptop boot again! 🥳

Some more #UEFI entertainment, I'm just waiting for it. 😹
Seriously though, #firmware #security has become such a problem because many vendors just can't even get updates right, still disco…

Windows and Linux users: The deadline to update Secure Boot keys is near
What you need to know about the expiration of keys securing your machine's boot sequence.

Here is a list of hashes to remind you that you should really better be in full control of your #firmware and boot chain:
https://www.welivesecurity.com/en/eset-res

Forgotten UEFI shims undermining Secure Boot
ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities.

Lenovo #UEFI #firmware bricked itself, messing up the NVRAM during suspend. Black screen only.
We took a fresh image from the website, and the system booted again.
But it showed INVALID for the product name and Linux wouldn't boot. I assume this ended up in DMI.
So we patched bac…

#NDAs in the #firmware