klange changed the topic of #osdev to: Operating System Development || Don't ask to ask---just ask! || For 3+ LoC, use a pastebin (for example https://gist.github.com/) || Stats + Old logs: http://osdev-logs.qzx.com New Logs: https://libera.irclog.whitequark.org/osdev || Visit https://wiki.osdev.org and https://forum.osdev.org || Books: https://wiki.osdev.org/Books
wereii has quit [Quit: ZNC - https://znc.in]
wereii has joined #osdev
asarandi has quit [Quit: WeeChat 4.1.1]
Vercas9 has quit [Quit: Ping timeout (120 seconds)]
asarandi has joined #osdev
Vercas9 has joined #osdev
lentement has joined #osdev
lentement has quit [Ping timeout: 252 seconds]
Vercas9 has quit [Remote host closed the connection]
Vercas9 has joined #osdev
gog has quit [Ping timeout: 246 seconds]
netbsduser has quit [Ping timeout: 246 seconds]
sbalmos has quit [Ping timeout: 272 seconds]
Turn_Left has quit [Read error: Connection reset by peer]
sbalmos has joined #osdev
zxrom has quit [Quit: Leaving]
lentement has joined #osdev
lentement has quit [Ping timeout: 264 seconds]
linear_cannon has quit [Remote host closed the connection]
linear_cannon has joined #osdev
netbsduser has joined #osdev
mxs has quit [Quit: The Lounge - https://thelounge.chat]
netbsduser has quit [Ping timeout: 252 seconds]
linearcannon has joined #osdev
linear_cannon has quit [Remote host closed the connection]
Fingel has joined #osdev
netbsduser has joined #osdev
linear_cannon has joined #osdev
netbsduser has quit [Ping timeout: 252 seconds]
heat has quit [Ping timeout: 264 seconds]
onering has joined #osdev
Beato has quit [Ping timeout: 272 seconds]
netbsduser has joined #osdev
<sskras> heat, you wrote:
<sskras> > UEFI has no architecture besides "uefi driver" and "uefi application"
<sskras> That might be true only when you see it as an UEFI user or when seeking for the high-level design.
<sskras> Meanwhile I am trying to look from the point of its' internal mechanisms / graph of switching of the possible states / internal control and data flow / surface to attack / low-level design.
<sskras> Even verification of certificates for signed images is fragile and unreliable: https://web.archive.org/web/20160513014703/https://pacsec.jp/psj13/psj2013-day2_Pierre_pacsec-uefi-pci.pdf#page=47
<bslsk05> ​web.archive.org: Wayback Machine
<sskras> And yes, the UEFI is just a part of the insanity created by Intel and called the Secure Boot: https://igor-blue.github.io/2021/02/04/secure-boot.html#uefi-memory-attributes-table
<bslsk05> ​igor-blue.github.io: In-depth dive into the security features of the Intel/Windows platform secure boot process - Igor’s Blog
<sskras> The way the UEFI needs to interact with the other parts of the rest of PC architectural madness (ITH, IOSF, CSME, TPM, PCRs, DRTM, TXT, IRBR, PPAM) is just ... unjustifiable IMO. It's overengineered to say the least.
<bslsk05> ​www.sentinelone.com: Another Brick in the Wall: Uncovering SMM Vulnerabilities in HP Firmware - SentinelOne
<sskras> That's why I am not going to rely on this crap, and would just short circuit it ASAP. Either in run-time (during every cold boot): https://www.synacktiv.com/en/publications/code-checkmate-in-smm.html
<bslsk05> ​www.synacktiv.com: Code Check(mate) in SMM
<sskras> ... or preferably only once in an operations phase AKA firmware surgery, along with cleaning out ME/AMT: https://superuser.com/questions/1252282/how-to-disable-or-remove-intel-smm
<bslsk05> ​superuser.com: security - How to disable or remove Intel SMM? - Super User
<sskras> Be it my will, such modern x86 idiosyncrasies would just die a quick death.
<sskras> Please excuse me the lengthy response. Extreme conditions demand extreme responses, as an old song says. :)
<sskras> So no, to me UEFI has a _lot_ of cruft in it besides to "uefi driver" and "uefi application" :P
netbsduser has quit [Ping timeout: 252 seconds]
<kof673> i am not a mod, but pastebin maybe. also......Brandolini's law :D not taking a side here :D
<sskras> kof673: good idea, I am going to use IRCcloud client's feature for posting long text as a linked snippet in future. Although I doubt any other OSDev topic could trigger me in such way :)
<kof673> well it was more formatting, in a plaintext file, make a grievances list 1) ... 2) ... 3) ...
<kof673> and then, can just link it in the future / update/etc.
<kof673> also prevents strawmen/etc. to have a list you can refer to :D
* kof673 zzzzzzzzzzzzzz
PapaFrog has quit [Ping timeout: 256 seconds]
PapaFrog has joined #osdev
gbowne1 has quit [Read error: Connection reset by peer]
netbsduser has joined #osdev
<geist> oh huh. new virtio 1.3 spec
<geist> didn't notice that
linear_cannon has quit [Ping timeout: 268 seconds]
linearcannon has quit [Ping timeout: 268 seconds]
netbsduser has quit [Ping timeout: 255 seconds]
Fingel has quit [Quit: Fingel]
goliath has joined #osdev
Gooberpatrol66 has quit [Ping timeout: 268 seconds]
zetef has joined #osdev
netbsduser has joined #osdev
netbsduser has quit [Ping timeout: 256 seconds]
gog has joined #osdev
netbsduser has joined #osdev
masoudd has joined #osdev
netbsduser has quit [Ping timeout: 256 seconds]
Bonstra has joined #osdev
heat has joined #osdev
GeDaMo has joined #osdev
nikolapdp has quit [Ping timeout: 252 seconds]
<heat> sskras, all/the vast majority of those are either implementation problems or UEFI PI problems
<heat> believe me, i know how shit tianocore/IBVs can be, but that's not a EFI spec problem, nor is it something you need to act upon from the OS's side
<mjg> EY
heat_ has joined #osdev
heat has quit [Ping timeout: 268 seconds]
<mjg> so luller
<mjg> i have openbsd installed, it came with a 2.9G partition for /usr/src
<mjg> git clone does not fit there
<mjg> :D
foudfou has quit [Remote host closed the connection]
foudfou has joined #osdev
<Ermine> riir'd tianocore when
netbsduser has joined #osdev
netbsduser has quit [Ping timeout: 260 seconds]
<heat_> Ermine, whose dick do i need to suck for that to happen
zetef has quit [Ping timeout: 260 seconds]
netbsduser has joined #osdev
<Ermine> unhinged!
lentement has joined #osdev
lentement has quit [Ping timeout: 256 seconds]
<mjg> may i suggest this kind of lang gets toned down
<mjg> if taking dumps on various codebases is in poor taste, remarks like the above should be considered doubly so
<mjg> cc geist
clever has quit [*.net *.split]
Ram-Z has quit [*.net *.split]
_whitelogger has quit [*.net *.split]
whereiseveryone has quit [Remote host closed the connection]
tom5760 has quit [Remote host closed the connection]
lh has quit [Remote host closed the connection]
jleightcap has quit [Read error: Connection reset by peer]
rselim has quit [Remote host closed the connection]
sm2n has quit [Remote host closed the connection]
patwid has quit [Remote host closed the connection]
pitust has quit [Remote host closed the connection]
alethkit has quit [Remote host closed the connection]
staceee has quit [Write error: Broken pipe]
ursa-major has quit [Write error: Broken pipe]
tommybomb has quit [Remote host closed the connection]
frkzoid has quit [Ping timeout: 268 seconds]
bitoff__ has quit [Ping timeout: 268 seconds]
heat_ has quit [Read error: Connection reset by peer]
goliath has quit [Quit: SIGSEGV]