• 7heo
    link
    fedilink
    English
    18
    edit-2
    5 months ago

    Somehow I doubt that manufacturers of 13 years old motherboards are going to update their UEFIs… I would love to be proven wrong, but it was hard enough to find a UEFI able to POST with a 2080 super already.

    Edit: I apologize for having missed the point entirely. I would like to thank [email protected] for bringing this to my attention. This is actually a firmware hacking mod that works by flashing an already modified (using the tools documented in the linked page) firmware to the UEFI EEPROM of a motherboard.

    However I will take the opportunity of hijacking my own comment to point out a couple (important) facts:

    1. Ron Minnich, one of the coreboot developers, once gave me the following, (hardware) life saving advice:

    Do not flash firmware on a UEFI EEPROM without having a mean to rescue your board. Meaning buy another chip, get a programmer and keep the original firmware onto the original EEPROM.

    1. Some UEFI firmwares are signed. Obviously, modifying them will break the cryptographic signature. This might entirely prevent you from flashing them, but if it does not, it will in any way always prevent the motherboard from checking the integrity of the file. Therefore, only modify a verified firmware, in a way that you understand. And ideally, sign it afterwards with your own key (or at least keep a copy of its hash in a separate location). This will not help wrt the motherboard, but it will absolutely help you making sure the firmware has not been modified any further.
    • @SteveTech
      link
      English
      105 months ago

      That’s exactly why this project exists, to allow users to add ReBAR support to their old motherboards.

    • quaff
      link
      fedilink
      English
      35 months ago

      I’m running up against the wall of breaking the signature. I guess my motherboard protects itself from unsigned modifications and idiot tinkerers 😂

      • 7heo
        link
        fedilink
        English
        4
        edit-2
        5 months ago

        You might be able to drop the manufacturer’s keys somehow[1] but I would not recommend.

        If you still really want to do this, I would advise you to:

        1. Unsolder the eeprom
        2. Solder a slot-in socket instead
        3. Get a new blank chip
        4. Get an eeprom programmer
        5. Dump the eeprom to a bin file
        6. Flash that bin file onto the new eeprom
        7. Test that the motherboard POSTs
        8. Search for cryptographic signatures (possibly compressed, possibly obfuscated - rolling XOR, reversed, etc) in the bin file
        9. Hack around that bin file trying to blank the keys, or better yet, replace them with yours.
        10. Go to step 7, repeat.

        Of course, you could always flash the modified bin onto the new eeprom directly at step 6, but what’s the fun in that? 😅

        Also, if you really do this(!), please don’t forget to document. 🙏


        1. I doubt they went as far as “fusing” them in the factory, it would be perceived as “overkill” for a general public product - which I assume it is - and would run the risk of bricking upgradibility of the board, should the manufacturer lose the keys. Plus, it doesn’t help anything (quite the contrary) if the keys are somehow leaked by the manufacturer. ↩︎

        • quaff
          link
          fedilink
          English
          3
          edit-2
          5 months ago

          Welp. My skills end at #1. So I guess I’m SOL 😂 Thanks for this though! I like knowing that it’s possible, even if it’s outside of my current ability 🙂

          • 7heo
            link
            fedilink
            English
            3
            edit-2
            5 months ago

            Well, technically, if you can do #1, you can probably do #2… 😋

            And then the rest doesn’t require advanced skills, with the exceptions of point #8. Using a programmer is essentially the same as with any other tool. There is a method, you follow it, and you never, ever get close to the blade with your hands when the machine is running. Oh, no, wait, that is for a different tool. 🙃

            • quaff
              link
              fedilink
              English
              35 months ago

              For sure haha I meant I don’t have soldering skills. I know there’s a hardware BIOS programmer device I could get, but I feel like at that point, I may as well get a new motherboard 👀

              • @[email protected]
                link
                fedilink
                English
                25 months ago

                If you’re getting a new motherboard anyway you might as well give it a go. There are some micro soldering training kits you can pick up for ~£15 to practice.