Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

Can someone explain if it affects personal computers in any way?

I know my computer has UEFI. But how could a non nation state agent use that vulnerability?

Or is it just about VMs, and it's important, because the whole cloud and internet runs on VMs?



If you have network boot enabled and you’re on a recent enough uefi you’re vulnerable yes. However personal devices have uefi network boot disabled by default

I swear I have seen plenty of PCs attempt a PXE boot before failing and continuing on to the next boot option. It probably isn't the default for most "personal" machines but... That's not really a guarantee I would want to hang my hat on...

I buy ex-corporate machines for my family; they always have pxe enabled. I've got a handful of optiplex micros running my home shit. All of those.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github