4 ms·
> I don't have much knowledge on how the block actually works, but I would assume it's not trivial to "just pretend to be one of the permitted devices." Why wo
by 95014_refugee 9y ago
> I don't have much knowledge on how the block actually works, but I would assume it's not trivial to "just pretend to be one of the permitted devices."
Why would you assume such a thing? There's no historical precedent for peripheral authentication in the PCI space, nor indeed for any of the common peripheral interfaces.
The closest you get is "you get the driver that claims to best service the thing you claim to be", which makes pretending to be something you're not less useful from a functional perspective, but does nothing for system security.
- txcwpalpha 9y agoI'm not sure why you would think of any of that. Peripherals for a long time have had authentication in the form of requiring signed drivers to work properly. Reviewing the information from the published 2016 MacBook DMA vulnerabilities specifically addresses this.
- cstrahan 9y agoYou’ve just changed your argument from “it’s probably difficult to spoof a vendor/device ID” to “drivers have historically required signatures”.