3 ms·
Or even why two SPI roms? Why not just one with special code? It's not like anyone is routinely reverse engineering the BMC boot code. It seems like an awful
by creeble 8y ago
Or even why two SPI roms?
Why not just one with special code? It's not like anyone is routinely reverse engineering the BMC boot code.
It seems like an awful lot of provable trouble to go through (note that there is no physical evidence in the public eye yet) when you could do the same thing, at the factory, with just software.
- baybal2 8y ago>Or even why two SPI roms? Because AST2400 has input for two flashes, one main, one recovery. And the configuration that uses that is not common. That specific moment actually makes it harder to detect, while being very simple from technical side.
- paulmd 8y agoit's pretty easy to dump an SPI chip and some vendors/customers routinely do so. In this model, the implant basically contains a binary patch that is injected at boot time over a segment of the BMC binary - counter overflows, chip cuts out the SPI and transmits its payload instead. After the payload is injected the implant goes dormant again/resumes passing through the SPI, so dumping the ROM after boot, or even physically clipping onto the SPI chip will not reveal the wu-tang secret.
- jgalentine007 8y agoWu-tang.
- deleted 8y ago[deleted]