tldrdailynews.com logo
Tag

Firmware

All articles tagged with #firmware

technology1 day ago

Linux 7.3 Adds 120-Second EFI Timeout to Shield User-Space From Buggy Firmware

Linux 7.3 enforces a 120-second timeout on EFI runtime service calls; if the timeout expires, the firmware is wedged and the kernel reports an EFI fault rather than letting the stalled call drag down the rest of user-space. The change—driven by Breno Leitao after issues on NVIDIA Grace servers—prevents a single buggy EFI call from triggering widespread stalls, improving reliability at fleet scale, though it does not fix the firmware bug itself and simply makes EFI faults explicit in dmesg.

via Phoronix|
#efi#firmware#kernel
AirPods Beta Gets iOS 27 Features and New Interface
technology4 days ago

AirPods Beta Gets iOS 27 Features and New Interface

Apple has released the fifth beta firmware (build 9A5347a) for AirPods Pro 2, AirPods Pro 3, AirPods 4, and AirPods Max 2, adding a redesigned AirPods interface, an Adaptive mode slider, and support for custom EQ in iOS 27/iPadOS 27/macOS Golden Gate, with Siri AI integration. The beta is accessible from AirPods settings on devices running the corresponding betas, and updates require powering the AirPods; installation can take several hours since there’s no separate software update option yet.

via MacRumors|
#airpods#apple#firmware
Mira Thing Revives Spotify's Abandoned Car Thing via Community Firmware
technology8 days ago

Mira Thing Revives Spotify's Abandoned Car Thing via Community Firmware

After Spotify pulled the plug on Car Thing, a community firmware project called Mira resurrects the hardware, letting users control Spotify from their car again. Setup requires USB-C tethering to a PC or phone and Bluetooth pairing; Mira Thing 1.0 restores features like podcasts, lyrics, source options, and multiple control modes, though two issues—Bluetooth auto-reconnect and wake-from-sleep reliability—persist. The GitHub guide is thorough, and the revival underscores a growing trend of reviving abandoned devices rather than discarding them.

via bgr.com|
#car-thing#community#firmware
technology23 days ago

Dasharo Delivers Open-Source Ryzen AM5 Firmware for MSI B850-P WIFI

3mdeb released Dasharo v0.9, an open-source firmware stack based on openSIL and Coreboot, for the MSI PRO B850-P WIFI, marking the first open-source firmware for a modern Ryzen AM5 desktop motherboard. The port supports Zen 4 Phoenix CPUs, UEFI Secure Boot, and has been tested with Windows 11 25H2 and Ubuntu 26.04 LTS, following earlier work porting the Dasharo stack to an AMD EPYC Gigabyte board.

via Phoronix|
#am5#amd-ryzen#coreboot
Backdoor Flaw Threatens Several Tenda Routers, CERT Warns
technology1 month ago

Backdoor Flaw Threatens Several Tenda Routers, CERT Warns

Researchers from CERT at Carnegie Mellon University have identified a login bypass embedded in several older Tenda router firmwares that can grant an attacker administrator access simply by using a specific password, regardless of the username. This could enable traffic redirection, opening network ports to devices, ransomware installation, man‑in‑the‑middle attacks, or locking users out of their own router. Affected models include FH1201, W15E, AC10 v1, AC5 v1, and AC6 v2, and there is no confirmed patch yet. Mitigations include disabling remote web management, verifying firmware versions via the router interface (usually at 192.168.0.1), and changing the LAN IP to another private address or considering a replacement if needed.

via SlashGear|
#backdoor#cybersecurity#firmware
Old shims break Secure Boot’s trust for a decade
security1 month ago

Old shims break Secure Boot’s trust for a decade

Researchers found 11 legacy UEFI shims, some dating back to 2013, that Microsoft failed to revoke, enabling a bypass of Secure Boot on Windows and Linux by simply using the still-trusted shim binaries. These shims can authorize subsequent bootloaders and load malicious firmware that persists after OS reinstalls, with revocation hampered by the DB/DBX system and newer SBAT/SVN mechanisms, all within tight size limits. Microsoft revoked the affected shims in June after the alert, but the case highlights the fragility and complexity of Secure Boot’s trust model. Linux users should verify status via vendor/ distributor tools (e.g., uefi-dbx-audit), and Windows users should note that the June patch has mitigations for many systems while the broader lesson remains that Secure Boot requires ongoing scrutiny.

via Ars Technica|
#firmware#linux#secure-boot
Philips Offers Free Replacements After Hue Bridge Pro Update Bricks Devices
technology1 month ago

Philips Offers Free Replacements After Hue Bridge Pro Update Bricks Devices

A firmware update (2071353020) caused a subset of Hue Bridge Pro hubs to brick, showing a red LED; fewer than 100 devices were affected. Philips Signify says the issue arose under a narrow upgrade scenario (auto-updates disabled, an older version, and a manual update after the package sat for more than 10 days) and is rolling out a fix. Philips will replace affected Hue Bridge Pro devices free of charge, regardless of warranty status, but affected users must reconfigure all lights and scenes on the new bridge. There is no path to migrate from a Hue Bridge Pro to a standard Hue Bridge (or to another Hue Bridge).

via Ars Technica|
#firmware#hue#philips-hue
Flipper Zero firmware enters a community-powered maintenance phase
technology1 month ago

Flipper Zero firmware enters a community-powered maintenance phase

Flipper Devices will continue maintaining the Flipper Zero firmware with a smaller internal team and a heavier reliance on community contributions, while shifting focus to new devices like Flipper One (open Linux) and the Busy Bar. Full-time feature development is over, though official firmware remains supported. A new workflow uses weekly GitHub Discussions reviews, community‑driven pull requests with stricter checks, mandatory integration and regression testing, and oversight of AI-generated or low-level changes. With direct social‑media messaging disabled due to high user volume, requests are voted on in Discussions to influence the roadmap.

via BleepingComputer|
#community#firmware#flipper-zero
technology2 months ago

Gemini AI Speeds Up Linux Boot on ASUS ROG Strix G16 G614

An AI-assisted kernel patch (via Google Gemini 3.5) shortens a 30+ second Linux boot on the ASUS ROG Strix G16 G614 by working around a firmware quirk that asserts a GPIO line at startup; the patch is expected to be upstreamed for systems without updated BIOS, while ASUS/AMD pursue a proper firmware fix, with discussions noting the root cause may involve ACPI/graphics-related GPIO behavior rather than the touchpad alone.

via Phoronix|
#asus#boot-time#firmware
AirPods Pro 3 firmware 8B41 expands rollout with bug fixes
technology2 months ago

AirPods Pro 3 firmware 8B41 expands rollout with bug fixes

Apple released firmware 8B41 for AirPods Pro 3 and Pro 2, widening access beyond beta with bug fixes and no new features announced; to install, update your iPhone/iPad/mac to the latest OS, ensure Bluetooth is on, keep the charging case charged and connected, place AirPods in the case with the lid closed for about 30 minutes, then reopen to verify the update. Release notes are expected to be posted soon.

via 9to5Mac|
#airpods-pro-2#airpods-pro-3#apple
Framework Laptop 13 Pro shipments push to July due to hardware fixes
gadgets2 months ago

Framework Laptop 13 Pro shipments push to July due to hardware fixes

Framework says the first Laptop 13 Pro shipments will now start in July (with some batches possibly slipping to early August or later) after fixes to a grounding issue in the new haptic trackpad require a redesigned circuit board, and a display firmware bug necessitates updated firmware from CSOT. Preorders without the affected components are still shipping on time, and customers can cancel for a full deposit refund if the delay is an issue.

via The Verge|
#delays#firmware#framework
Hack Me Through the Speaker: BLE Flaw Lets Firmware Takeover
technology2 months ago

Hack Me Through the Speaker: BLE Flaw Lets Firmware Takeover

A Creative Sound Blaster sound bar exposes a Bluetooth Low Energy interface that requires no authentication, enabling a nearby attacker to send commands and even reflash the device’s firmware to act as a USB keyboard, potentially compromising the host system. While USB commands require authentication, the BLE path does not, making proximity access enough for exploitation. The finding highlights BLE as a common vulnerability in consumer electronics and suggests air-gapping or securing edge devices like speakers.

via Hackaday|
#bluetooth#firmware#security