Firmware Security is a link-collection blog on firmware, UEFI, ACPI, baseband, and platform security news, research, and tools.
HN links it for firmware security references, such as Qualcomm baseband location tracking, platform security checklists, and UEFI HTTP Boot; one commenter bookmarked it as good stuff.
The dev said in one of the comments to the video:
I used EDK II framework. About the keyboard input, Program reads the value from 0x60 port directly because of multi-key input processing. I measure the timer count twice(for 1sec) by using the rdtsc instruction to make game delay more accurate. I didn't implement the audio output.
One can read in the video that it's a port of MoarNES: https://moarnes.sourceforge.io/ (0.13.8.21 alpha).
You might also be interested in:
-- CHIP-8 Emulator for UEFI: https://github.com/Openwide-Ingenierie/CHIP-8-UEFI
-- Implementing UEFI Boot to Zork: https://mjg59.dreamwidth.org/27881.html
-- Flappy Bird UEFI (there's also a video of a Street Fighter 2-like game demo there): https://github.com/hymen81/UEFI-Game-FlappyBirdy
-- Firmware Security blog UEFI games posts: https://firmwaresecurity.com/tag/game/
> As someone who's worked in the consumer electronics industry for years, I think we desperately need to rethink our approach to Linux-based electronics with respect to both the userland and the primary application.
Google has created a stack called NERF (Non-Extensible Reduced Firmware) for this:
https://firmwaresecurity.com/2017/07/23/google-nerf-non-extensible-reduced-firmware/
There's a presentation about it on youtube:
https://www.youtube.com/watch?v=iffTJ1vPCSo
Apple won't save you. Qualcom does this in the baseband, from what I understand:
https://firmwaresecurity.com/2018/05/18/qualcomm-izat-and-baseband-location-tracking/
Of course the cell companies have it too, along with anyone they sell the data too. My recent work with location smart showed that verizon was the only carrier that required user consent for that.
> I write "images" to it in ISO format but I keep wondering how long boot media will depend on emulating a spinning CD/DVD drive.
Could UEFI HTTP Boot [1][2] replace the need to boot from ISOs?
[1] https://firmwaresecurity.com/2015/05/09/new-uefi-http-boot-support-in-uefi-2-5/
[2] http://ipxe.org/appnote/uefihttp
Intel ME runs MINIX[1], and one of it's applications is a JVM with some things running on top. It's pretty insane.
[1]: https://firmwaresecurity.com/2017/05/07/intel-me-based-on-minix/
> Allowing Secure Boot to be bypassed is a backdoor in itself.
Like Ubuntu does?
http://firmwaresecurity.com/2016/01/07/ubuntus-uefi-secure-boot-not-a-security-measure/