windows binary for gnupg 1.4.11 // compilation instructions posted
Robert J. Hansen
rjh at sixdemonbag.org
Thu Sep 22 22:07:07 CEST 2011
On 9/22/2011 3:59 PM, vedaal at nym.hush.com wrote:
> Can these rootkits work when there is no mbr access?
Yes. In fact, EFI/UEFI is more or less a replacement for MBRs.
EFI/UEFI is almost the first thing through the CPU's brain upon booting.
There's probably some on-chip microcode that executes first, but
EFI/UEFI is, IIRC, the first off-CPU stuff that gets loaded and executed.
The EFI/UEFI designers went to some lengths to harden the system against
malware -- unfortunately they could only harden it, not immunize it.
More information about the Gnupg-users