Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google
6 人推荐 · 跨 4 个月 · 2017–2023
中文导读
Google 的 Ronald Minnich 深入剖析了封闭的 UEFI 固件为何构成巨大的攻击面，并介绍了 Google 用基于 Linux 的引导固件替代它的工作，同时探讨了 Intel ME 等安全协处理器。
为什么 HN 推它
被广泛推荐为固件安全风险与 Intel ME 领域的标杆演讲，深入解析了为何用 Linux 替代 UEFI 既能加快启动速度又能强化安全性。
「一位 Google 工程师带来的极其精彩的视频。」HN 网友原话：Absolutely fantastic video from a google engineer
英文原摘要（HackerTube / Claude 整理）
Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.
Recommended as the go-to talk on firmware security risks, Intel ME, and why replacing UEFI with Linux speeds up and hardens boot.
HN 上的提及
Because Intel ME is very large and complicated (according to
IMO its a solid 30 minute investment.
gives a nice overview of their efforts to replace parts of Intel ME and UEFI with Linux
Absolutely fantastic video from a google engineer
one of the guys fighting the good fight against all of the voodoo BS in your Intel/AMD firmware