Possible to circumvent any low level malware?

[BillClinton69]

Is there any way to safeguard against low level malware such as a BIOS with backdoors?

[Aki]

Hello,

Is there any way to safeguard against low level malware such as a BIOS with backdoors?

--
note: discussion moved to "Off-Topic" sub-forum

[Hallvor]

Enable secure boot? Intel's Boot Guard?

[lindi]

If your CPU supports Intel TXT you can use the tboot package to build solutions that don't allow backdoored BIOS to tamper with your Linux environment. However, this requires significant research on your part.

[CwF]

About a decade back there was a major supply chain breach that was caught. One of the lessons was the OS in use is entirely irrelevant. Technically, network and cameras and mics can work without an OS. With bios chips, of whatever flavor, exceeding 16,32,64,128MB in size, a fairly capable OS can reside there.
Answer: when discovered, destroy equipment in question.

Look into IPMI to learn just one example of what is possible outside the OS. Any of that tech could be included into a commodity consumer device, and for nefarious duty excluded from the advertised feature set.

[reinob]

I understood OP's question to be about how to detect/protect oneself from a backdoored BIOS, like you buy a PC and it's already backdoored.

I guess in such cases you'd need external control, e.g. a firewall (which is not backdoored itself :) to make sure that nothing weird goes in or comes out of your BIOS-backdoored PC, as well as using your PC assuming all the time that whatever you do is being shown on some billboard :)