<story><title>NSA&apos;s BIOS Backdoor a.k.a. God Mode Malware</title><url>http://resources.infosecinstitute.com/nsa-bios-backdoor-god-mode-malware-deitybounce/?Print=Yes</url></story><parent_chain></parent_chain><comment><author>xSwag</author><text>Why is this website not banned yet? They&amp;#x27;re very well known plagiarists.&lt;p&gt;&lt;a href=&quot;http://attrition.org/errata/charlatan/infosec_institute/&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;attrition.org&amp;#x2F;errata&amp;#x2F;charlatan&amp;#x2F;infosec_institute&amp;#x2F;&lt;/a&gt;</text></comment>
<story><title>NSA&apos;s BIOS Backdoor a.k.a. God Mode Malware</title><url>http://resources.infosecinstitute.com/nsa-bios-backdoor-god-mode-malware-deitybounce/?Print=Yes</url></story><parent_chain></parent_chain><comment><author>userbinator</author><text>Here&amp;#x27;s another reason why using a free BIOS like Coreboot is a great idea - if malware attempts to reflash it with an infected copy of presumably the original proprietary BIOS, it will be very, &lt;i&gt;very&lt;/i&gt; obvious.&lt;p&gt;Another &amp;quot;tamper detection&amp;quot; idea, if you&amp;#x27;re OK with using proprietary BIOS and&amp;#x2F;or Coreboot isn&amp;#x27;t supported, is to add a small piece of code to the existing BIOS that simply hashes the ROM contents and prints out a human-readable string to the boot screen based on that. If it goes missing or changes, then you can suspect something happened. Of course, the trick is to &lt;i&gt;not&lt;/i&gt; have everyone doing this with the same code, or backdoors will just detect and spoof it. I modded the BIOS of an old machine I have to do this, it prints out &amp;quot;Customised by {my handle}&amp;quot;.</text></comment>