Embed Notice

Looking at the LogoFAIL white paper and I'm not connecting the "just about every device vulnerable" part of the headlines.

IIUC, vulnerable UEFI firmware has to support loading a custom logo from the EFI system partition. I can't find much vendor support for this?

The only documented method I've found is from HP: https://support.hp.com/au-en/document/c01646879

Do more vendors support this but don't document it?

Other "custom BIOS logo" tutorials I've found involve repacking a firmware image, in which case surely the logo is in the BGRT inside the firmware payload which is verified by Intel Boot Guard / Secure Boot before it's loaded. Isn't it?

#logofail #infosec #uefi