Tag Archives: firmware

伺服器的 BIOS 保護機制

NIST (National Institute of Standards and Technology) 是美國的政府機關 (國家標準技術研究所),訂定了非常多的標準。像是 DES 的制定 (NIST 前身,NBS - National Bureau of Standards) 與 AES 的選拔都是 NIST 的成果。 在 Slashdot 上看到 NIST 對於伺服器 BIOS 的保護機制提出建議:「NIST Publishes Draft Guidelines For Server BIOS Protection」,NIST 原始公告則是在「Security First: New … Continue reading

Posted in Computer, Hardware, Murmuring, Security, Software | Tagged , , , , | 2 Comments

請更新 HP 印表機的韌體...

HP 發了安全通告「HPSBPI02728 SSRT100692 rev.2 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default」,在安全通告內列出的印表機都有安全問題,「允許遠端安裝未經授權的印表機韌體」,攻擊者可以遠端直接安裝有木馬的韌體: A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to … Continue reading

Posted in Computer, Hardware, Murmuring, Network, Security | Tagged , , , , , | Leave a comment