what exactly stops a malicious person from buying 100s of motherboards, reprogramming the firmware chips code (specifically the UEFI implementation), then reselling it back to people anonymously? or even just returning it back to the reputable seller who will be completely unaware of the new rootkit he is now selling onto his other customers
use case?
>>110112578What stops the internet to be safe and 0 viruses?
>>110112583spying on my hentai folder
>>110112578skill
>>110112593the inherent goodness of humanity
>>110112595>hentai foldercan you link it here
>>110112578>reprogramming the firmware chips code (specifically the UEFI implementation)Not possible with Intel ME / AMD PSP.
>>110112650>AMD PSPwtf amd boughted sony??
>>110112650isn't intel ME just an embedded system inside the CPU? i didn't know it had anything to do with the UEFI firmware chip?
>>110112660Why not, SI boom must have made AMD rich
>>110112601so true (unironically)
>>110112578nothing, except for >>110112598>>110112650those have nothing to do with uefi
>>110112578That is completely retarded. Why would you go through that effort? In real life how it's done is you setup a drop shipping company for android TV boxes, smart buttplug thermostats, coffee filters with lovesense integration (the same shit everyone else resells) and load it with malicious firmware. Amazon, Alibaba, etc. all become your global distribution channel and the best part is the retards are paying you for the privilege of being botnetted.
>>110112578No one is stopping you from reflashing the bios and getting rid of the malwareI hope you guys always update the bios after buying a new motherboard, not just because of rootkits but because most motherboards come with very outdated firmware
>>110112578Nothing, except law.
>>110112578they already do this, why are you acting all spooked now?
>>110112578Nothing. But the first thing you should do when getting a motherboard is downloading the latest firmware and flashing that on, before even installing an operating system on it.
>>110112578>bocchi the hacker4chan
>>110114779How would you get around the tamper-evident stickers?
>>110112578Mossad is way ahead of you.
>>110112578>ReputableNo reputable marketplace accept anonymous transaction. The moment you pull this shit you get a bunch of pinkertons outside your house inviting you over for a coffee.
>>110115228Are you actually retarded? The malware is loaded onto the device at the manufacturer level usually. Besides these stickers are trivially easy to buy on the grey market especially for the type of dual-use operations that actually do this.
>>110112578>>110112650>>110114721BIOS modding pretty much completely breaks the chain of trust on modern systems.The system might not even complain that much if at all at first but the moment you enable a TPM, it will refuse to work and will likely let you know on boot the BIOS as been modified.Secure boot might fail to work as it's own DB has the BIOS signature and will disable itself if there is a mismatch.If it's modern enough and Intel boot guard or AMD equivalent was enabled the BIOS might not even load at all as the BIOS signature is a mismatch compared to what is burned on the CPU from OEM integration.Ironically the things people call botnets are some of the only things that would actually let you know your system is compromised.
>>110112578>bocchi the techguy
>>110112578That's called fraud and ends with you in prison.
>>110112578Nothing. This is what the government does, but they intercept your mail to flash your shit rather than buy/return to the store. Buy your electronics in person.
>>110116112Secure boot basically just means the UEFI checks the kernel is signed by microshart. If you mod the UEFI you can disable that check and then you can patch the kernel to disable whatever other checks and then load malware into the OS as a kernel driver
>>110117066This will soon be illegal.
>>110117066>the kernelNot available on a single motherboard as described by OP>>110112595>hentaiNot illegal. Unless you have drawings of children.
>>110112578You can't reprogram motherboard firmware unless you have extremely specialized and expensive equipment to do it
The friction
>>110114795Nigga, it's not the law that's stopping people to do this. If I sell meth secretly, and I'm good at it, the law is not stopping me. Yes, the it's against the law, people are gonna try to stop me but It's not that easy.So, all they are limited by is skill. Hard to even make firmware for the specific motherboard chips, and hard to make something useful out of this. It's hard to write spyware at that level.You'd have to be a 10x King Terry or smt like that.Anyway, the jews might have backdoors in them already. Might not be something big.The way to go is to buy fully open source computers, reflash your compiled open source firmware with a trusted compiler, then continue from there.
>>110116112this is not how this works
you willingly ran a script that did exactly this when you installed ltsc btw
