4 ms·
So put malware in the BIOS itself, or one of the other chips or ROMs available. I think I remember reading a story recently about Thunderbolt or maybe USB bein
by PuffinBlue 8y ago
So put malware in the BIOS itself, or one of the other chips or ROMs available.
I think I remember reading a story recently about Thunderbolt or maybe USB being connected to an Option ROM over PCIe (must have been Thunderbolt I guess) that allowed an attacker to simply plug in a USB stick and permanently and irrevocably pwn the system - right down to securing the flaw that allowed flashing of the ROM over the PCIe connection. I think the malware overwrote some bit that allowed any further writing, so even attaching physical chip flashing device to the ROM wouldn't clear the malware. The machine was effectively permanently compromised and could only be thrown away.
- mirimir 8y agoYes, it was Thunderbolt.[0] Firewire had the same issue. As does PCIe. But maybe USB 2.0 can be secured. If so, just fill other ports with epoxy. And use metal-flake nail polish to tamper protect seams. If USB isn't securable, give up, I guess. 0) https://news.ycombinator.com/item?id=12383130 https://news.ycombinator.com/item?id=12383130
- georgebarnett 8y agoThat’s the great thing about USB-C - If you epoxy the ports, you now can’t charge.. sigh
- mirimir 8y agoMaybe have multiple batteries, and use a dumb charger?
- georgebarnett 8y agoMy MacBook has only one port and a sealed battery compartment, which is not helping :(
- mirimir 8y agoDamn. So is USB-C securable?
- georgebarnett 8y agoSure!* *Probably not, going by history.
- mirimir 8y agoSo how come there's no key-authenticated USB? Something analogous to OpenSSH, maybe.