On 28/09/2018, Peter Stuge <pe...@stuge.se> wrote:
> Youness Alaoui wrote:
>> avoid any malware writing to the flash
>
> Just disallow flash writes by the platform. Allow flash writes only
> by dedicated hardware (maybe ChromeEC?) which implements a simple and
> efficient security protocol.

Relevant URL: 
https://www.chromium.org/chromium-os/ec-development#TOC-Write-Protect


> Looking for a software solution is IMO like Intel trying to secure SMM.

Hear, hear!

-- 
coreboot mailing list: coreboot@coreboot.org
https://mail.coreboot.org/mailman/listinfo/coreboot

Reply via email to