3 ms·
Yes, indeed. This has been done as a proof of principle [1]. I don't think its being used in mainstream malware. [1] http://spritesmods.com/?art=hddhack&page=5
by frozenport 11y ago
Yes, indeed. This has been done as a proof of principle [1]. I don't think its being used in mainstream malware.
[1] http://spritesmods.com/?art=hddhack&page=5 http://spritesmods.com/?art=hddhack&page=5
- nitrogen 11y agoI seem to remember Snowden docs indicating that the NSA had HDD firmware hacks in their toolkit, and that such hacks are an example of what they mean by "advanced persistent threat".
- frozenport 11y agoIndeed, additionally I recall that the HP server's Iran used had some similar security issue on the RAID(?) controllers. But I hate to write stuff on HN without a source :-)