To view parent comment, click here.
To read all comments associated with this story, please click here.
ssokolow,
"You honestly expect motherboard manufacturers to obsessively release patches for every single motherboard they offer for the entire 5-10 year lifespan of the manufactured boards and not screw up getting them actually installed in the end users' PCs?"
The good ones will offer updates to older MBs retroactively, the others will only fix it going forward. Either way real defections seem unlikely.
"I seriously doubt motherboard manufacturers are prepared to handle reliably providing ongoing security fixes for what is essentially a small operating system."
There's a huge technical difference. A real OS has to be secure while running arbitrary user programs. With UEFI, you'll be hard pressed to find the opportunity to run your code in the first place because it's not authorized. So you might have to find an OS level vulnerability to get system access in order to exploit the UEFI vulnerability.
Although that's likely to happen eventually, it would become more useful to real hackers than users who just want to run linux. Once the windows vulnerability gets fixed, the UEFI one becomes inaccessible again.
Edited 2012-12-07 22:44 UTC




Member since:
2010-01-21
"That is, assuming they can convince the motherboard manufacturers to support things to a suitable degree."
Haven't they already?
You honestly expect motherboard manufacturers to obsessively release patches for every single motherboard they offer for the entire 5-10 year lifespan of the manufactured boards and not screw up getting them actually installed in the end users' PCs?
Last I checked, with BIOS-based motherboards, the solution was "release something tested, expect no more than 1% of users to need to update, and possibly provide updates when a hardware incompatibility or software bug is discovered."
(I know of at least once instance where a Gigabyte rep insisted that it must be the owner's fault that a fully-updated BIOS was still exhibiting a problem... maybe because they were running Linux before the problem was also proven to be present on Windows)
I seriously doubt motherboard manufacturers are prepared to handle reliably providing ongoing security fixes for what is essentially a small operating system.