Request an audit

// research write-ups

Disclosure.

Write-ups of published research: the finding, the root cause, the evidence and the disclosure. Deep dives with reproducible detail, nothing reposted.

Coordinated disclosure with Lenovo PSIRT

Part 4 of 4: the Lenovo WmiBiosSetupSmm disclosure. See Part 1 (the chain), Part 2 (validation), and Part 3 (authorization). The first three parts covered the bugs. This one covers the process, because a firmware finding is only as good…

Read write-up →