3 ms·
What happens if your cd that comes in the mail is swapped out for a different cd by a malicious actor?
by soccerdave 10y ago
What happens if your cd that comes in the mail is swapped out for a different cd by a malicious actor?
- kabdib 10y agoYou check hashes (from the web site) after you copy the files to media you trust, and then any tampering is really interesting . . .
- aruggirello 10y agoYou can find well-known hashes to check your install media with online (assuming you can trust the media because it comes wrapped up in a nice package is a bit naive...). What you cannot check however, is a USB key firmware (ring-0?) malware, that lives completely outside of disk space, and thus is beyond reach, but might have limited (or even complete) access to the system it is plugged to. CDs and DVDs (don't know, but perhaps SD/compact flash/etc. cards too?) are thus the last mainstream media that come with 'no firmware attached'.
- joyfulgerard 10y ago> What happens when a malicious actor leaves physical evidence all over? They get caught.