• Brem@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    22
    ·
    17 hours ago

    Also, If your motherboard installs something through a bios update, that has nothing to do with your OS. It comes before.

    • Dremor@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 hours ago

      That not how that shit is done.

      The BIOS just take care of the basics, but Windows do have an API allowing the BIOS to ask for the installation of additional drivers. That process was abused (and continue to be) by multiple hardware vendors to install spywares or adwares.
      Linux doesn’t have that API, and just ignore such requests.

    • extremeboredom@lemmy.world
      link
      fedilink
      English
      arrow-up
      27
      arrow-down
      1
      ·
      17 hours ago

      Please point out the bios deployed adware you are talking about, or I’ll have to assume you’re just talking from vibes.

      • village604@adultswim.fan
        link
        fedilink
        English
        arrow-up
        5
        ·
        16 hours ago

        Lenovo had spyware baked into the chips that would reinstall itself if it was removed from the OS. It was a big thing.

        Although I believe that was just for Windows. But the functionality exists for them to do it to Linux if they decide to.

        • halcyoncmdr@piefed.social
          link
          fedilink
          English
          arrow-up
          8
          ·
          15 hours ago

          Multiple (most?) motherboard manufacturers have options to install drivers and software from the BIOS. So you don’t have to go download it elsewhere just to get your system up and running.

          That setting can be turned off. In fact they usually turn themselves off after the first boot because otherwise it would prompt every time.

          But, you’re referencing Lenovo, a full system integrator, not a separate hardware company. Of course the system integrators bundle shit, that’s not new at all. They’ve done that for decades.

          • subignition@fedia.io
            link
            fedilink
            arrow-up
            15
            ·
            17 hours ago

            well, that article disagrees with you though. That “feature” is only going to do anything to Windows installations.

            Also, OS doesn’t matter if it’s a bios update.

            The ASUS UEFI firmware exposes an ACPI table to Windows 10, called “WPBT” or “Windows Platform Binary Table”. WPBT is used in the pre-built OEM industry, and is referred to as “the Vendor’s Rootkit.” Put simply, it is a script that makes Windows copy data from the BIOS to the System32 folder on the machine and execute it during Windows startup - every single time the system is booted.

            also, https://github.com/Jamesits/dropWPBT

            • Bilb!@lemmy.ml
              link
              fedilink
              English
              arrow-up
              12
              ·
              16 hours ago

              Not to mention, it has nothing to do with having a new computer. But you know, they said they were drunk.

            • potatopotato@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              1
              ·
              15 hours ago

              And this is all predicated on windows including this “feature”. Like, yes, theoretically, malicious devices can manipulate parts of the broader system and fire off exploits. Such an exploit would be very big news though, it’s not something vendors can get away with casually.