LegbaCore

Deep system security startup by @XenoKovah and @CoreyKal

[LegbaCore @legbacore]

A video by Trammell Hudson @qrs of #Thunderstrike2 spreading OS->boot flash->OROM->other laptop boot flash is here: https://t.co/k7U3mHVZup

[Xeno Kovah @XenoKovah]

My favorite new slide from our update to the Thunderstrike 2 talk for #HITBGSEC: BIOS Necromancy revealed!

[Enno Rey @Enno_Insinuator]

Accompanying whitepaper to @legbacore's #HITBGSEC talk, on CVE-2014-4860 in Apple context:
http://t.co/ubbpi4jj6U

[Xeno Kovah @XenoKovah]

Includes #HITBGSEC exclusive new content about Apple's vulnerability to our pwnie-award-winning vuln from last year https://t.co/Vg1ch3wXHB

[OpenSecurityTraining2 @OpenSecTraining]

The 2 day class "Introduction to BIOS & SMM" has been uploaded, thanks to the @legbacore folks http://t.co/nJuNbwuaRe

[LegbaCore @legbacore]

Our last public offering of the "Introductory BIOS & SMM attack & defense" class will be at #HITBGSEC Oct 12-13 http://t.co/wPaBWv7mUM

[LegbaCore @legbacore]

Thunderstrike 2 slides now published at http://t.co/OADm0rlUqc

[Xeno Kovah @XenoKovah]

@XenoKovah So stay tuned to his HITB GSEC talk, where he'll talk about how VU#552286 can exploit "dead code" to break into Mac firmware

[LegbaCore @legbacore]

Congratulations to LegbaCore co-founder @coreykal for winning the 2015 @PwnieAwards for best privilege escalation

[LegbaCore @legbacore]

@nootropic_ Sure, you just have to read all the papers here ;) http://t.co/odpAK1OgKy

[LegbaCore @legbacore]

Stories about our talk with Trammell Hudson @qrs about #Thunderstrike2 are at Wired http://t.co/g5eH7LjJAp and Forbes http://t.co/NI3CoJU5lV

[WIRED @WIRED]

Researchers have created a firmware worm that attacks Macs http://t.co/hkzZewqaA4

[LegbaCore @legbacore]

@SimonZerafa Of course...neither Copernicus nor ChipSec work on Macs unless you install Windows w/ BootCamp...

[LegbaCore @legbacore]

@SimonZerafa If you look at our RSA talk, you'll see we lay out some one week/one month/one year recommendations http://t.co/OADm0rDvOM

[LegbaCore @legbacore]

@paxos1977 If Apple couldn't even fix "rootpipe" in one try, what is the probability that there are a bunch of other not-fully-fixed vulns?

[LegbaCore @legbacore]

@paxos1977 At no point have attackers (other than script kiddies) ever been unable to get root. Privilege escalation vulns are plentiful

[LegbaCore @legbacore]

Are Macs secure against firmware attacks? Nope. Do you need an exploit to brick them? Nope. http://t.co/v3BcVYySK3

[LegbaCore @legbacore]

@FrancisJeffrey7 @2dev0 Yes, as indicated in the two cited threads, where other researchers indicate they use it the same way

[LegbaCore @legbacore]

@Fu3l3dSecurity Nope

[LegbaCore @legbacore]

@2dev0 Not enough chars left to say "EFI BIOS" https://t.co/N2PlSwvW8N https://t.co/7n9Sir8nm2