Recent content by silentdude56k

A malicious BIOS could absolutely push a malicious microcode update to a vulnerable CPU, but the BIOS is also persistent and can do whatever it wants to any code executed afterwards. It's already game over at that point.

This isn't as serious as the closing paragraph suggests. Microcode updates are not permanent; they're stored in a special microcode RAM that loses its contents just like system RAM does when it loses power. Microcode is first loaded from the microcode ROM burned in at time of manufacture, then...