The concept has been proposed before. And there have been several urban legends about so-called rogue BIOS infections. However, if this story turns out to be true, this is the first time anybody who figured out how was willing to demo it.
Either way, it's worth noting that in order for something like this to work,
somebody has to flash the BIOS. It doesn't install itself. It requires user intervention. Or does until they start to deploy self-updating BIOS chips. (Don't hold your breath on that one!

) And even then, requiring a simple hardware switch setting to flash the BIOS would stop it cold.
Unfortunately, there's nothing anybody can do to completely protect a system from its owner's actions.
So how much has changed in the wake of this development? Not much really. I don't think this is going to be all that big a security threat. It's just going to be one more potential risk we'll need to be aware of and watch out for.
In the past, we never used to worry all that much about flashing our BIOS. Now, maybe we should. Just a little...
