3 ms·
Ah yes, if you execute unsigned code from it then that's definitely possible.
by hueving 9y ago
Ah yes, if you execute unsigned code from it then that's definitely possible.
- dTal 9y agoSigning the code doesn't help. Where are you reading the signature-verification code from?
- ryanlol 9y agoPresumably you use TPM and the various trusted boot technologies. I think you’ll still have the problem with this thing being on a pci-e bus though.
- hueving 9y agoYes, I was more curious if a malicious actor (the hard drive) with access to the nvme bus could manage to exfiltrate data directly via the network interfaces without involving the OS.
- hueving 9y agoI suggest you look into TPM and the full signed-code architectures it enables.