BIOS file hashes or signatures (question)

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   I don't think any brand does this, but every BIOS is verified for a board before You update, so it can only use a BIOS verified for that particular board.
And Honestly, after 40 years in the business, the only time people ruined theur BIOS, was by there own doing, or downloading it from a different website, other than the manufacturers.
I think, only when its proven, that a BIOS on their website, is hacked, they will react to the threat

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
threadzipper1957 Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 05 Mar 2022 Status: Offline Points: 9365	Post Options Post Reply Quote threadzipper1957 Report Post Thanks(0) Quote Reply Topic: BIOS file hashes or signatures (question) Posted: 07 Apr 2023 at 11:08pm
	I don't think any brand does this, but every BIOS is verified for a board before You update, so it can only use a BIOS verified for that particular board. And Honestly, after 40 years in the business, the only time people ruined theur BIOS, was by there own doing, or downloading it from a different website, other than the manufacturers. I think, only when its proven, that a BIOS on their website, is hacked, they will react to the threat
	Kind Regards

Gorn42 Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 29 Dec 2022 Status: Offline Points: 130	Post Options Post Reply Quote Gorn42 Report Post Thanks(0) Quote Reply Posted: 30 Dec 2022 at 2:32pm
	When you download Oracle JDK, they provide SHA512 hashes, and when you download TOR browser, they provide a PGP signature. Most win32 executables from major companies are signed with a security certificate. However, though the BIOS is clearly a hugely import piece from a computer security viewpoint, I don't see any SHA256/512 hashes or pgp signatures available for the BIOS downloads, and I don't think .ROM files can be signed in a way that allows Windows or the user to verify the signature. Why is this, Asrock? Why are these critical security measures not in place?