Conan_Kudo, to random
@Conan_Kudo@fosstodon.org avatar

(TianoCore) switched away from emailing patches to GitHub pull requests for contributions.

This will make things a lot easier for contributing to the most commonly used framework for firmware.

See: https://edk2.groups.io/g/devel/message/119311

jan, to random
@jan@kcore.org avatar
ai6yr, to linux
@ai6yr@m.ai6yr.org avatar

Random Linux fix: machine would not obey changes to efibootmgr... kept on repopulating (old) grub entry. Fix was to delete the folder in /boot/efi manually. Also UEFI sucks.

ai6yr,
@ai6yr@m.ai6yr.org avatar
projectgus, to random
@projectgus@aus.social avatar

So pleased to hear Framework is spinning up their own firmware and drivers team: https://frame.work/au/en/blog/enabling-software-longevity

This has been my only significant concern with Framework laptop ownership thus far. (There hasn't yet been a stable firmware release for Linux users in the 13+ months I've had my laptop.)

Hetti, to Software German
@Hetti@chaos.social avatar

Just found the IRC client for your motherboard 😲

https://github.com/codyd51/uefirc

Should you use it? Check out the section!
https://github.com/codyd51/uefirc?tab=readme-ov-file#should-i-use-this

donwatkins, to linux
@donwatkins@fosstodon.org avatar

How to upgrade your system BIOS/EUFI using FreeDOS

https://www.both.org/?p=4625

governa, to RedHat
@governa@fosstodon.org avatar
look997, to windows Polish
@look997@101010.pl avatar

Zagłębiam się w kontrolę obrazu (wyświetlany na ekranie) na poziomie UEFI a potem systemu operacyjnego. Ale mam masę pytań.

Istnieje GOP (UEFI Graphics Output Protocol).
Wydaje się, że on kontroluje obraz, na etapie od naciśnięcia przycisku POWER na komputerze.
W pewnym momencie kontrolę przejmuje sterownik karty graficznej.
Czy tak jest? Czy dzieje się tam coś jeszcze pomiędzy?

Czyli karta graficzna jest w trybie GOP, a potem w trybie w którym obraz kontroluje sterownik karty graficznej?

Interesuje mnie kwestia rozdzielczości i częstotliwości odświeżania obrazu nadawanego przez kartę graficzną, do ekranu.

W jaki sposób GOP to kontroluje? Rozdzielczość i częstotliwość odświeżania obrazu?
Gdy włączę OSD monitora będąc w UEFI, to widać tam 2560x1440 60 Hz.

W pewnym momencie, przy chyba przełączaniu na system operacyjny, na chwilę gaśnie ekran, a potem wraca i już ma ustawioną właściwą rozdzielczość i częstotliwość odświeżania (2560x1440 165 Hz).

Dlaczego musi dojść do tego zgaśnięcia ekranu? Czemu to nie może być płynne?
Czemu na etapie UEFI nie może być 2560x1440 165 Hz?
Zresztą, gdy ustawię w systemie 2560x1440 60 Hz (czyli taki sam jak mówi OSD, że jest przy UEFI), to ekran i tak, tak samo gaśnie.
Więc z czego to wynika? Jaki dokładnie mechanizm za tym stoi, na poziomie karty graficznej?

Po co mi ta wiedza? Z ciekawości...
Bo u mnie to gaśnięcie ekranu trwa 6 sekund, niby tak długi czas, to wina monitora, że on tak po prostu ma, i jest wiele monitorów które tak po prostu mają. Ale jest to minimalnie problematyczne, i przez to się tak zagłębiam w temat...

Monitor Gigabyte M32QC połączony DisplayPort
Grafika GeForce RTX 3060 Ti
Płyta główna ASRock A620MHDV/M.2+

look997, (edited ) to hardware
look997 avatar

I'm delving into controlling the image (displayed on the screen) at the UEFI level and then the operating system level. But I have lots of questions.

There is GOP (UEFI Graphics Output Protocol).
He appears to be controlling the image right from pressing the POWER button on the computer.
At some point, the graphics card driver takes over.
Is that so? Is there something else going on in between?

So the graphics card is in GOP mode, and then in the mode in which the image is controlled by the graphics card driver?

I am interested in the issue of resolution and refresh rate of the image transmitted by the graphics card to the screen.

How does the GOP control this? Image resolution and refresh rate?
When I turn on the monitor's OSD while in UEFI, it shows 2560x1440 60 Hz.

At some point, probably when switching to the operating system, the screen goes blank for a moment and then comes back with the correct resolution and refresh rate set (2560x1440 165 Hz).

Why does this screen blackout have to happen? Why can't it be smooth?
Why can't it be 2560x1440 165 Hz at the UEFI stage?
Anyway, when I set the system to 2560x1440 60 Hz (which is the same as the OSD says for UEFI), the screen goes out the same way.
So what does this mean? What exactly is the mechanism behind this, at the graphics card level?

Why do I need this knowledge? Out of curiosity...
Because in my case the screen goes off for 6 seconds, it seems like such a long time, it's the monitor's fault, it's just like that, and there are many monitors that just have it like that. But it's minimally problematic, and that's why I'm delving deeper into the topic...

Monitor Gigabyte M32QC connected DisplayPort
GPU GeForce RTX 3060 Ti
Motherboard ASRock A620MHDV/M.2+

techsinger, to llm

Just in case anyone is interested, and for the archives/searches, I recently asked if anyone had managed to use #LLM models to access #UEFI interfaces, or other interfaces without #A11Y, as a #blind user. The idea was to use a capture card to bring in the video information from the inaccessible machine, send pictures from that video stream to the LLM, and get descriptions/ask questions. This is how I did it. It's not pretty, but it's another helpful tool for the toolbox. It requires a video capture card, HDMI or display port to USB, the OpenAI #NVDA add-on, and a method of displaying the video from the capture card on screen. I tried four HDMI capture cards and all of them worked, I think the point is that the capture device should show up to Windows as a webcam. I haven't found a cheap capture device which didn't, the only reason I had to try four was that I was using audio input from the HDMI for another project and it's surprising how many devices will not receive the sound even in simple stereo. Anyhow, just searching for HDMI capture on google/amazon will probably get something to use. The Open AI NVDA Add-on is at https://github.com/aaclause/nvda-OpenAI/ The method I used to display the received video is at https://superuser.com/questions/1744688/how-can-i-view-the-video-coming-in-from-a-capture-card-on-windows-in-full-screen The steps are basically to put the puzzle pieces together. Set up the add-on with its instructions, copy and paste the HTML in the superuser link to a new HTML file, and open that HTML file in the browser. Having the file run from file explorer works fine, and firefox, at least, will ask for permission so make sure to allow it. Now, move the NVDA navigator cursor/focus to the video. Here, the object is called "document", the point is to avoid sending the entire screen, or even the firefox window. Having pressed the add-on command to capture the object, you will be placed in the prompt field and can ask any questions you like or rely on the default "describe this image" prompt. Generally, I will use the describe the image first and then ask follow-up questions or modify the image as best I can. Just a few tips. Maximizing the window and pressing the "full screen" button in firefox on the video appears to be helpful. The GPT 4 vision model does confabulate/hallucinate, and what it makes up is plausible. This is just another tool, not something to rely on exclusively. It is in addition to, rather than instead of, OCR, one's own knowledge, etc. The image is sometimes cut off, I'm not sure why this is but suspect at least some of it comes from its being displayed on the screen in the browser. I would welcome better ways to do this, as I said, it's not pretty and just what I could come up with in a few minutes of searching and with some trial/error. Having said that, it is a small step forward. Note that, as one would expect, the method also works to bring in pictures from a standard webcam. #nvdasr#ScreenReader

itnewsbot, to security
@itnewsbot@schleuss.online avatar

Critical vulnerability affecting most Linux distros allows for bootkits - Enlarge

Linux developers are in the process of patching a hig... - https://arstechnica.com/?p=2001542

agraf, to random
@agraf@fosstodon.org avatar

On my way to / . Please get in touch if you want to catch up on , , , or related topics!

fatboy, to linux
@fatboy@fosstodon.org avatar

Bookmark this.

How to Restore an EFI Boot Partition | Baeldung on Linux
https://www.baeldung.com/linux/efi-boot-partition-restore

techsinger, to llm

I know this is quite odd, but it's really just a shot in the dark so I don't reinvent the wheel. I'm sure someone has already done this and undoubtedly done it better than the way I want to. I am and want to bring the HDMI output of one computer, running its UEFI configuration interface, to another computer, and then send the image of that output to OpenAI's so it can tell me what is selected, what is on the screen, and so on. This is so I can get access to the UEFI on machines, both to install systems and during those times when the machine doesn't boot and there's no sighted person around. I know of no method for blind users with . My thinking is that a capture card would allow this. Has anyone managed this sort of thing on a windows machine? I don't mean to limit to the UEFI input, any sort of visual input from which static images are routed to a LLM from a capture card/visual input would be good to hear about. If so, I would be very grateful for any ideas on both the card and software to use, particularly so that the image is clear to the model. Thanks for having a look at what I'm sure is a very strange request.

EmpeRohr, to linux
@EmpeRohr@federation.network avatar

I cant seem to get sound running under on my machine...

Windows recognizes the onboard soundcard, but linux doesn´t, no matter which distro i am trying. Every singel one says dummy output. I tried restarting pipewire, alsamixer and pulseaudio. I tried another kernel, I reinstalled everything ...nothing. and windows is like: yup, there is the soundcard! Ahhh so frustrating...any recommendations what i can do to get soud work?

tionisla,

@EmpeRohr @tuxedocomputers @Tionisla

Seufz schade, hätte von Tuxedo zwar anderes erwartet. Naja...

Aber, wild guess, evtl. probierst du trotzdem TuxedoOS auf der Kiste aus. Wer weiß...

Und ich booste das mal über mein troet.cafe Account in meine Mastodon bubble.

Vision 15 e23 quirk

itnewsbot, to security
@itnewsbot@schleuss.online avatar

New UEFI vulnerabilities send firmware devs across an entire ecosystem scrambling - Enlarge (credit: Nadezhda Kozhedub)

UEFI firmware from five of... - https://arstechnica.com/?p=1996543

abcdw, to guix
@abcdw@fosstodon.org avatar

@krevedkokun shared a cool thread about uki-bootloader implementation for guix, which brings alternative to grub and better encrypted root support. The solution has some drawbacks, but still very nice to see this work done!

https://yhetil.org/guix-patches/cover.1705465384.git.lilah@lunabee.space/

x_cli, to infosec

Vulnerabilities in EDK2 NetworkPkg IP stack implementation.

https://www.kb.cert.org/vuls/id/132380

> Multiple vulnerabilities were discovered in the TCP/IP stack (NetworkPkg) of Tianocore EDKII, an open source implementation of Unified Extensible Firmware Interface (UEFI). Researchers at Quarkslab have identified a total of 9 vulnerabilities that if exploited via network can lead to remote code execution, DoS attacks, DNS cache poisoning, and/or potential leakage of sensitive information. have labeled these set of related vulnerabilities as PixieFail.

itnewsbot, to intel
@itnewsbot@schleuss.online avatar

Enabling Intel AMT For BIOS-over-WiFi - Intel ME, AMT, SMT, V-Pro… All of these acronyms are kind of intimidating, all we ... - https://hackaday.com/2024/01/05/enabling-intel-amt-for-bios-over-wifi/

CyReVolt, to random
@CyReVolt@mastodon.social avatar

I started publishing the recordings of our exploitation sessions.

Playlist is here: https://youtube.com/playlist?list=PLenOHeTI_A9PIW3zelb6c2vhd9V9GhCgF

If you're at , go check out the self-organized sessions. I have submitted an intro to and a /u-root/cpu workshop.
And at the Open Source Foundation (OSFF) assembly, I'll run a little a exploitation session.

CyReVolt, to security
@CyReVolt@mastodon.social avatar

Are you interested in ? 👩‍💻
Want to know about and ?
Have you heard of the vulnerability?

Come visit us at the Open Source Firmware Foundation (OSFF) assembly! 🥳🏳️‍🌈

https://events.ccc.de/congress/2023/hub/en/assembly/OSFF/

tysonsw, to random
cazabon, to random

The recent - the decoder for the image is buggy, so you can fashion an image that will get full pre-secure-boot control of the machine at the level - seems to be getting way too much credit. Am I wrong here?

To be able to drop your specially-constructed image in the EFI system partition on a Linux machine, you need root privileges. So you need a chained remote-root vulnerability first.

(Or local access, but that's game over anyway)

Am I wrong here?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • megavids
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • provamag3
  • tester
  • Leos
  • JUstTest
  • All magazines