Overclock.net › Forums › Industry News › Hardware News › [The Register] Gigabyte BIOS blight fright: Your megabytes’ rewrite plight in the spotlight
New Posts  All Forums:Forum Nav:

[The Register] Gigabyte BIOS blight fright: Your megabytes’ rewrite plight in the spotlight - Page 2

post #11 of 52
Quote:
Originally Posted by Defoler View Post

Even if they do, how many people are actually updating their board firmware?
I'll bet the almost overwhelming majority had never updated their board firmware even on their several good years old motherboards.

Yeah that is a rather a serious and inconvenient issue exactly for the reason stated above. Such problems shouldn't be arising at all and preventing them at a later date is quite challenging.
BEAST
(15 items)
 
MacBook
(6 items)
 
 
CPUMotherboardGraphicsRAM
Intel Core i7 4930K Asus P9X79 Asus GeForce GTX 1080 Ti Kingston HyperX Savage (64GBs) 
Hard DriveHard DriveHard DriveCooling
Western Digital Black (1TB) Western Digital Black (1TB) Samsung 850 Pro (1TB) Intel Water Cooling TS13X 
OSMonitorKeyboardPower
Windows 10 Samsung LS27B970DS/EN Das Keyboard 4 Professional Coolermaster Silent Pro M2 
CaseMouseMouse Pad
Thermaltake Level 10 GT Razer Ouroboros Steelseries 
CPUGraphicsRAMHard Drive
Intel Core M Processor  Intel HD Graphics 5300 8 GB 1600 MHz LPDDR3 256GB PCIe-based onboard flash storage 
OSMonitor
OS X Yosemite 2304x1440 
  hide details  
Reply
BEAST
(15 items)
 
MacBook
(6 items)
 
 
CPUMotherboardGraphicsRAM
Intel Core i7 4930K Asus P9X79 Asus GeForce GTX 1080 Ti Kingston HyperX Savage (64GBs) 
Hard DriveHard DriveHard DriveCooling
Western Digital Black (1TB) Western Digital Black (1TB) Samsung 850 Pro (1TB) Intel Water Cooling TS13X 
OSMonitorKeyboardPower
Windows 10 Samsung LS27B970DS/EN Das Keyboard 4 Professional Coolermaster Silent Pro M2 
CaseMouseMouse Pad
Thermaltake Level 10 GT Razer Ouroboros Steelseries 
CPUGraphicsRAMHard Drive
Intel Core M Processor  Intel HD Graphics 5300 8 GB 1600 MHz LPDDR3 256GB PCIe-based onboard flash storage 
OSMonitor
OS X Yosemite 2304x1440 
  hide details  
Reply
post #12 of 52
From the article it seems like it is only effecting OEM distributors? or perhaps those boards listed were generally available models to.
post #13 of 52
Quote:
Originally Posted by ikjadoon View Post

Why is it always Lenovo that I hear about with these things? I thought they were the "enterprise-ish" OEM, you know, who took this stuff slightly more seriously than HP or Dell or Acer.

Maybe it's because they ship the most systems, they get targeted more? Or because the systems are more common, they're more often tested for vulnerabilities? Or, is it just carelessness at Lenovo? Whatever Sailfish or Snapfish or whatever the crap-fish surprised me a little bit.

--

Anyways, as a Z87X-UD5H owner, I hope Gigabyte puts out a public comment. Do we need patches?

The actual sauce: https://github.com/Cr4sh/ThinkPwn
I don't thing regular users have anything to worry about, this is a tool for corporate espionage.
Edited by The Robot - 7/7/16 at 8:34pm
Main
(17 items)
 
Nintendo DS
(8 items)
 
 
CPUMotherboardGraphicsRAM
6700K Gigabyte Z170X-Gaming 3 MSI GTX 1080 Gaming X G.Skill Ripjaws V 16GB 3000 
Hard DriveHard DriveCoolingCooling
Samsung 850 Evo 500GB WD Blue WD30EZRZ 3TB Noctua NH-D15S Nanoxia Deep Silence 140mm, 1100 RPM, 68.5 CFM 
CoolingOSMonitorKeyboard
Nanoxia Deep Silence 120mm, 1300 RPM, 60.1 CFM Windows 10 Enterprise Zalcom ZM27Q1 27" 1440p Glossy IPS Leopold FC750 (MX Brown) 
PowerCaseMouseAudio
EVGA 650 G2 Corsair 400Q Logitech Performance Mouse MX Mayflower Objective2 + ODAC Rev. B Combo 
Audio
Audio-Technica ATH-A990Z 
CPUCPURAMHard Drive
ARM946E-S 67.028 MHz  ARM7TDMI 33.514 MHz  4 MB 256 kB 
OSMonitorMonitorPower
DS OS 3" 256×192 18-bit 3" 256×192 18-bit 850 mAh 
  hide details  
Reply
Main
(17 items)
 
Nintendo DS
(8 items)
 
 
CPUMotherboardGraphicsRAM
6700K Gigabyte Z170X-Gaming 3 MSI GTX 1080 Gaming X G.Skill Ripjaws V 16GB 3000 
Hard DriveHard DriveCoolingCooling
Samsung 850 Evo 500GB WD Blue WD30EZRZ 3TB Noctua NH-D15S Nanoxia Deep Silence 140mm, 1100 RPM, 68.5 CFM 
CoolingOSMonitorKeyboard
Nanoxia Deep Silence 120mm, 1300 RPM, 60.1 CFM Windows 10 Enterprise Zalcom ZM27Q1 27" 1440p Glossy IPS Leopold FC750 (MX Brown) 
PowerCaseMouseAudio
EVGA 650 G2 Corsair 400Q Logitech Performance Mouse MX Mayflower Objective2 + ODAC Rev. B Combo 
Audio
Audio-Technica ATH-A990Z 
CPUCPURAMHard Drive
ARM946E-S 67.028 MHz  ARM7TDMI 33.514 MHz  4 MB 256 kB 
OSMonitorMonitorPower
DS OS 3" 256×192 18-bit 3" 256×192 18-bit 850 mAh 
  hide details  
Reply
post #14 of 52
I update my bios as soon as I get a new board. Though, once its updated I leave it alone unless there is a reason to do so.
 
Gsvlip Dudyrm
(15 items)
 
Oda'maksv
(9 items)
 
CPUMotherboardGraphicsRAM
3770k @ 4.5 1.312 load Zotac Z77 ITX Wifi GTX 1070 Gaming 2126/2249 w/ Hybrid cooler TridentX 16GB 2400MHz 
Hard DriveHard DriveCoolingCooling
Samsung 850 Pro 1TB Seagate 2TB H105 EVGA Hybrid GPU cooler 
OSMonitorKeyboardPower
Windows 10 Asus MG279Q - 24" 144Hz 1080p Filco Majestic II w/ Cherry Reds Seasonic X 760W 
CaseMouseMouse PadAudio
Bitfelix Prodigy Logitech G400 Razer Goliath AKG A701 
AudioAudio
JDS Labs Objective 2 JDS Labs ODAC 
CPUMotherboardGraphicsRAM
Core i5 750 3.99 (190x21) 1.376v Load ASUS P7P55d-E Pro GTX 670 FTW <- Poor overclocker :( 8GB (4x2GB) G.Skill DDR3 1600 
Hard DriveHard DriveOptical DriveOS
Samsung 830 Evo 128GB 2x 2TB  Some DVD drive OSX 10.10.4 
MonitorPowerCaseMouse
Asus 1080P Crap TX 750 HAF 922 G400s 
Mouse PadOther
Apple Keyboard Xbox One controler 
CPURAMHard DriveHard Drive
C2D 2,26GHz under volted @ .978v 8GB  Crucial M4 64GB SSD 500GB Scorpio Black 
OSMonitorKeyboardMouse
OS X 10.0 1280x800 Built-in Trackpad 
Audio
Built-in 
  hide details  
Reply
 
Gsvlip Dudyrm
(15 items)
 
Oda'maksv
(9 items)
 
CPUMotherboardGraphicsRAM
3770k @ 4.5 1.312 load Zotac Z77 ITX Wifi GTX 1070 Gaming 2126/2249 w/ Hybrid cooler TridentX 16GB 2400MHz 
Hard DriveHard DriveCoolingCooling
Samsung 850 Pro 1TB Seagate 2TB H105 EVGA Hybrid GPU cooler 
OSMonitorKeyboardPower
Windows 10 Asus MG279Q - 24" 144Hz 1080p Filco Majestic II w/ Cherry Reds Seasonic X 760W 
CaseMouseMouse PadAudio
Bitfelix Prodigy Logitech G400 Razer Goliath AKG A701 
AudioAudio
JDS Labs Objective 2 JDS Labs ODAC 
CPUMotherboardGraphicsRAM
Core i5 750 3.99 (190x21) 1.376v Load ASUS P7P55d-E Pro GTX 670 FTW <- Poor overclocker :( 8GB (4x2GB) G.Skill DDR3 1600 
Hard DriveHard DriveOptical DriveOS
Samsung 830 Evo 128GB 2x 2TB  Some DVD drive OSX 10.10.4 
MonitorPowerCaseMouse
Asus 1080P Crap TX 750 HAF 922 G400s 
Mouse PadOther
Apple Keyboard Xbox One controler 
CPURAMHard DriveHard Drive
C2D 2,26GHz under volted @ .978v 8GB  Crucial M4 64GB SSD 500GB Scorpio Black 
OSMonitorKeyboardMouse
OS X 10.0 1280x800 Built-in Trackpad 
Audio
Built-in 
  hide details  
Reply
post #15 of 52
Looks like my lappy is probably vulnerable
 
DD Portable
(12 items)
 
 
CPUMotherboardGraphicsRAM
i5 5675C Gigabyte GA-Z97X Gaming 5 XFX RX 480 GTR 32GB Corsair Vengeance 1600 
Hard DriveHard DriveHard DriveCooling
Samsung 840 Evo Western Digital Black RE4 2TB Western Digital Green 2TB bequiet! Silent Wings 2 140mm PWM 
CoolingCoolingCoolingOS
bequiet! Silent Wings 2 140mm PWM bequiet! Shadow Wings SW1 120mm PWM bequiet! Dark Rock Pro 3 Arch X64 / Gnome and OSX 10.11 
MonitorKeyboardPowerCase
Samsung 590D 4K KBC Poker II be quiet! Straight Power 10 400W bequiet! Silent Base 800 
MouseAudioAudio
Speedlink Omni VI  Sound Blaster Z  Bose Companion 2  
CPUMotherboardGraphicsRAM
i5 3427U The Googs HD4000 4GB DDR3 
Hard DriveOSMonitorKeyboard
32GB Flash / 128GB SanDisk Extreme SD card ChromeOS / Ubuntu 14.04 12" 2560x1700 bad 
PowerCaseMouseAudio
not much  Aluminium  Trackpad it makes noise I think  
  hide details  
Reply
 
DD Portable
(12 items)
 
 
CPUMotherboardGraphicsRAM
i5 5675C Gigabyte GA-Z97X Gaming 5 XFX RX 480 GTR 32GB Corsair Vengeance 1600 
Hard DriveHard DriveHard DriveCooling
Samsung 840 Evo Western Digital Black RE4 2TB Western Digital Green 2TB bequiet! Silent Wings 2 140mm PWM 
CoolingCoolingCoolingOS
bequiet! Silent Wings 2 140mm PWM bequiet! Shadow Wings SW1 120mm PWM bequiet! Dark Rock Pro 3 Arch X64 / Gnome and OSX 10.11 
MonitorKeyboardPowerCase
Samsung 590D 4K KBC Poker II be quiet! Straight Power 10 400W bequiet! Silent Base 800 
MouseAudioAudio
Speedlink Omni VI  Sound Blaster Z  Bose Companion 2  
CPUMotherboardGraphicsRAM
i5 3427U The Googs HD4000 4GB DDR3 
Hard DriveOSMonitorKeyboard
32GB Flash / 128GB SanDisk Extreme SD card ChromeOS / Ubuntu 14.04 12" 2560x1700 bad 
PowerCaseMouseAudio
not much  Aluminium  Trackpad it makes noise I think  
  hide details  
Reply
post #16 of 52
Quote:
Originally Posted by The Robot View Post

I don't thing regular users have anything to worry about, this is a tool for corporate espionage.

What do you mean?

Looks like Lenovo is taking it seriously.... https://support.lenovo.com/us/en/solutions/LEN-8324
The 2013 Build
(14 items)
 
  
CPUMotherboardGraphicsRAM
--- SOLD --- --- SOLD ---  --- SOLD --- --- SOLD --- 
Hard DriveOptical DriveCoolingOS
Samsung 850 EVO 500GB ASUS DRW-24B3ST (24X DVD burner) Noctua NH-U14S w/ NH-T1 TIM Windows 10 Pro (x64) 
MonitorKeyboardPowerCase
ASUS VG248QE w/ Lightboost @ 120Hz Ducky Shine III (MX Brown w/ Red backlights) Kingwin LZP-1000 (1000W) PSU Corsair Carbide Air 540 
Mouse Pad
Razer Goliathus (Precision Control model) - Sta... 
  hide details  
Reply
The 2013 Build
(14 items)
 
  
CPUMotherboardGraphicsRAM
--- SOLD --- --- SOLD ---  --- SOLD --- --- SOLD --- 
Hard DriveOptical DriveCoolingOS
Samsung 850 EVO 500GB ASUS DRW-24B3ST (24X DVD burner) Noctua NH-U14S w/ NH-T1 TIM Windows 10 Pro (x64) 
MonitorKeyboardPowerCase
ASUS VG248QE w/ Lightboost @ 120Hz Ducky Shine III (MX Brown w/ Red backlights) Kingwin LZP-1000 (1000W) PSU Corsair Carbide Air 540 
Mouse Pad
Razer Goliathus (Precision Control model) - Sta... 
  hide details  
Reply
post #17 of 52
Quote:
Originally Posted by ikjadoon View Post

What do you mean?

Looks like Lenovo is taking it seriously.... https://support.lenovo.com/us/en/solutions/LEN-8324
Well it's not like your home machine is going to get hacked through this hole, unless you are afraid NSA is after your furry pron archive. It's more like "dumb user in a company opens targeted socially engieered attachment with expensive one-off undetected malware and the hacker gets all the trade secrets".
Main
(17 items)
 
Nintendo DS
(8 items)
 
 
CPUMotherboardGraphicsRAM
6700K Gigabyte Z170X-Gaming 3 MSI GTX 1080 Gaming X G.Skill Ripjaws V 16GB 3000 
Hard DriveHard DriveCoolingCooling
Samsung 850 Evo 500GB WD Blue WD30EZRZ 3TB Noctua NH-D15S Nanoxia Deep Silence 140mm, 1100 RPM, 68.5 CFM 
CoolingOSMonitorKeyboard
Nanoxia Deep Silence 120mm, 1300 RPM, 60.1 CFM Windows 10 Enterprise Zalcom ZM27Q1 27" 1440p Glossy IPS Leopold FC750 (MX Brown) 
PowerCaseMouseAudio
EVGA 650 G2 Corsair 400Q Logitech Performance Mouse MX Mayflower Objective2 + ODAC Rev. B Combo 
Audio
Audio-Technica ATH-A990Z 
CPUCPURAMHard Drive
ARM946E-S 67.028 MHz  ARM7TDMI 33.514 MHz  4 MB 256 kB 
OSMonitorMonitorPower
DS OS 3" 256×192 18-bit 3" 256×192 18-bit 850 mAh 
  hide details  
Reply
Main
(17 items)
 
Nintendo DS
(8 items)
 
 
CPUMotherboardGraphicsRAM
6700K Gigabyte Z170X-Gaming 3 MSI GTX 1080 Gaming X G.Skill Ripjaws V 16GB 3000 
Hard DriveHard DriveCoolingCooling
Samsung 850 Evo 500GB WD Blue WD30EZRZ 3TB Noctua NH-D15S Nanoxia Deep Silence 140mm, 1100 RPM, 68.5 CFM 
CoolingOSMonitorKeyboard
Nanoxia Deep Silence 120mm, 1300 RPM, 60.1 CFM Windows 10 Enterprise Zalcom ZM27Q1 27" 1440p Glossy IPS Leopold FC750 (MX Brown) 
PowerCaseMouseAudio
EVGA 650 G2 Corsair 400Q Logitech Performance Mouse MX Mayflower Objective2 + ODAC Rev. B Combo 
Audio
Audio-Technica ATH-A990Z 
CPUCPURAMHard Drive
ARM946E-S 67.028 MHz  ARM7TDMI 33.514 MHz  4 MB 256 kB 
OSMonitorMonitorPower
DS OS 3" 256×192 18-bit 3" 256×192 18-bit 850 mAh 
  hide details  
Reply
post #18 of 52
Quote:
Originally Posted by ikjadoon View Post

Why is it always Lenovo that I hear about with these things? I thought they were the "enterprise-ish" OEM, you know, who took this stuff slightly more seriously than HP or Dell or Acer.

Maybe it's because they ship the most systems, they get targeted more? Or because the systems are more common, they're more often tested for vulnerabilities? Or, is it just carelessness at Lenovo? Whatever Sailfish or Snapfish or whatever the crap-fish surprised me a little bit.

--

Anyways, as a Z87X-UD5H owner, I hope Gigabyte puts out a public comment. Do we need patches?

The actual sauce: https://github.com/Cr4sh/ThinkPwn

Lenovo is china based so of what i know china as probably the best hacker in the world
Gaming PC
(18 items)
 
HTPC
(13 items)
 
 
CPUMotherboardGraphicsRAM
Amd Fx 8300 95w Gigabyte 970A-UD3P 8 Phase Sapphire 7950 G.SKILL Trident X DDR3 1600 7-8-8-24 1x8gb 
Hard DriveCoolingOSMonitor
Seagate Barracuda ST1000DM003 1tb Corsair H110i GTX Windows 10 64bit Pro 1440x900 Acer 
KeyboardPowerCaseMouse
Coolermaster Devastator Red Corsair RM650 Coolermaster Haf XB Coolermaster Devastator 
Mouse Pad
E-Blue COBFACE 
  hide details  
Reply
Gaming PC
(18 items)
 
HTPC
(13 items)
 
 
CPUMotherboardGraphicsRAM
Amd Fx 8300 95w Gigabyte 970A-UD3P 8 Phase Sapphire 7950 G.SKILL Trident X DDR3 1600 7-8-8-24 1x8gb 
Hard DriveCoolingOSMonitor
Seagate Barracuda ST1000DM003 1tb Corsair H110i GTX Windows 10 64bit Pro 1440x900 Acer 
KeyboardPowerCaseMouse
Coolermaster Devastator Red Corsair RM650 Coolermaster Haf XB Coolermaster Devastator 
Mouse Pad
E-Blue COBFACE 
  hide details  
Reply
post #19 of 52
I thought Gigabyte was Chinese? If so, then I'm not surprised some vulnerability was built in to boards that would end up in American markets. Have to make it look like the transfer of IP was unintentional.........a lot of interest/debt is likely paid off this way, or at least it buys time.
SandySilver
(19 items)
 
  
CPUMotherboardGraphicsGraphics
i7-3770k Gigabyte Z77X-UP5 TH Nvidia GTX 480 Nvidia GTX 480 
RAMHard DriveHard DriveOptical Drive
Samsung WD VelociRaptor HHTZ OCZ Agility 4 ASUS BluRay 
CoolingOSMonitorKeyboard
Noctua NH-D14 Windows 7 Pro Dell U2412M Rosewill Cherry MX Brown 
PowerCaseMouseMouse Pad
Seasonic Platinum 1000 Silverstone Fortress FT02-B Gigabyte Force M7 SteelSeries 
OtherOtherOther
HK AVR 520 Infinity IL50 Velodyne CT-120 
  hide details  
Reply
SandySilver
(19 items)
 
  
CPUMotherboardGraphicsGraphics
i7-3770k Gigabyte Z77X-UP5 TH Nvidia GTX 480 Nvidia GTX 480 
RAMHard DriveHard DriveOptical Drive
Samsung WD VelociRaptor HHTZ OCZ Agility 4 ASUS BluRay 
CoolingOSMonitorKeyboard
Noctua NH-D14 Windows 7 Pro Dell U2412M Rosewill Cherry MX Brown 
PowerCaseMouseMouse Pad
Seasonic Platinum 1000 Silverstone Fortress FT02-B Gigabyte Force M7 SteelSeries 
OtherOtherOther
HK AVR 520 Infinity IL50 Velodyne CT-120 
  hide details  
Reply
post #20 of 52
I think you missed the point I was making- it's a mutual agreement with plausible deniability.
SandySilver
(19 items)
 
  
CPUMotherboardGraphicsGraphics
i7-3770k Gigabyte Z77X-UP5 TH Nvidia GTX 480 Nvidia GTX 480 
RAMHard DriveHard DriveOptical Drive
Samsung WD VelociRaptor HHTZ OCZ Agility 4 ASUS BluRay 
CoolingOSMonitorKeyboard
Noctua NH-D14 Windows 7 Pro Dell U2412M Rosewill Cherry MX Brown 
PowerCaseMouseMouse Pad
Seasonic Platinum 1000 Silverstone Fortress FT02-B Gigabyte Force M7 SteelSeries 
OtherOtherOther
HK AVR 520 Infinity IL50 Velodyne CT-120 
  hide details  
Reply
SandySilver
(19 items)
 
  
CPUMotherboardGraphicsGraphics
i7-3770k Gigabyte Z77X-UP5 TH Nvidia GTX 480 Nvidia GTX 480 
RAMHard DriveHard DriveOptical Drive
Samsung WD VelociRaptor HHTZ OCZ Agility 4 ASUS BluRay 
CoolingOSMonitorKeyboard
Noctua NH-D14 Windows 7 Pro Dell U2412M Rosewill Cherry MX Brown 
PowerCaseMouseMouse Pad
Seasonic Platinum 1000 Silverstone Fortress FT02-B Gigabyte Force M7 SteelSeries 
OtherOtherOther
HK AVR 520 Infinity IL50 Velodyne CT-120 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Hardware News
Overclock.net › Forums › Industry News › Hardware News › [The Register] Gigabyte BIOS blight fright: Your megabytes’ rewrite plight in the spotlight