Story

Credit goes too, to groups like Intel, who have steadily increased the 'power' and 'utility' of the BIOS to the point where it is now a fun attack vector. All this 'management code' and such - I can't be specific because I scarecely understand it, myself - is frightening.

BIOS should check the hardware, hand things off to the boot loader, and then "peace out." Make any code complicated enough and begins to become a target; I think that's exactly what we've got here.