3 ms·
What's really scary is that most Android SoCs now have the baseband sitting in the same package as your CPU, with similar levels of access to system memory. The
by subway 9y ago
What's really scary is that most Android SoCs now have the baseband sitting in the same package as your CPU, with similar levels of access to system memory. The baseband firmware is usually unmaintained, but often in theory can be altered OTA by your carrier.
- kllrnohj 9y agoIntel & AMD CPUs also have firmware that can be updated as well. Not to mention the BIOS itself which is often blindly trusted.
- subway 9y agoSure -- fortunately on most Intel and AMD CPUs you have some level of control in isolating the host from mobile carriers and those acting as mobile carriers.
- kllrnohj 9y agoMobile carriers do not write or sign the baseband. You're at the whim of the hardware manufacturer in both cases (Intel CPUs & Qualcomm basebands).
- subway 9y agoI'm pretty sure in the case of at least Qualcomm, the carrier can do a heckuva lot more. Most snapdragon SoCs support a pretty hefty subset of OMA-DM at the baseband level, allowing for execution of arbitrary 'apps' on the baseband, by the carrier. Throw in any vulnerability in that baseband stack, and now attackers have a very direct path to system memory.