4 ms·
DMA/Firewire over USB makes pretty much every systen vulnerable to USB attacks (ME aside.)
by goldenkey 9y ago
DMA/Firewire over USB makes pretty much every systen vulnerable to USB attacks (ME aside.)
- cyphar 9y agoDMA-based attacks are blocked by the IOMMU, which is present in all modern machines (and has been for a few years). Linux has preferential enablement of DMA such that the IOMMU is initialised first, so even plugging in a device in early boot will not be able to exploit DMA.
- TD-Linux 9y agoDoes it? To use the IOMMU for VFIO, I had to explicitly enable it via a kernel parameter.