logoalt Hacker News

vayliantoday at 3:40 PM3 repliesview on HN

I know that firmware (and software in general) has bugs. But I wonder why modern firmware for UEFI has to be so complex, that it needs updates on a regular basis. It would be nice to have a dead-simple hardware-initialisation system that doesn't need regular updates and that only has very limited attack surface.


Replies

wedemmoeztoday at 3:44 PM

That is the dream isn't it? But there's no such thing since even a simple one that requires no updates would have some sort of vulnerability that needs an update, and the cycle continues.

show 1 reply
doublepg23today at 4:28 PM

SeaBIOS on a Coreboot laptop is pretty minimal. Paltry CPU speeds on anything that supports it nowadays, but fun for a beater system.

show 1 reply
xvfLJfx9today at 4:36 PM

Regular updates are not always because of bugs but to support new hardware. Or security fixes.

show 1 reply