3 ms·
If you have all the resources of a state actor to accomplish this, it’s owuld not be a chip on the motherboard, it would be a set of circuits in the motherboard
by MR4D 8y ago
If you have all the resources of a state actor to accomplish this, it’s owuld not be a chip on the motherboard, it would be a set of circuits in the motherboard.
Why make something easy to photograph when you can embed it an area that can only be seen in an x-ray?
That’s how I’d do it at least.
- thinkmassive 8y agoThe original Bloomberg article said some of the chips were so thin they were sandwiched between PCB layers.
- xevb3k 8y agoOr just replace an existing chip, which is the most logical way to do it...
- ggggtez 8y agoHow do you know they don't do that too? This is just one news story, from one manufacturer.
- xevb3k 8y agoI’m mean they could do that too... but why do this weirdly awkward thing described by Bloomberg at all? It’s not like doing both is extra sure, it’s just weirdly difficult and more easily detectable to do it in the way described.
- lmm 8y agoThat seemed to match the lightbluetouchpaper description - the "hack chip" goes where the optional legacy (non-quad) SPI chip would go.
- xevb3k 8y agoGiven the size estimation, it wouldn’t cover the whole footprint. But... why put it on an unpopulated footprint. Why not just replace the original Quad SPI IC with a backdoored device?
- deleted 8y ago[deleted]
- lmm 8y agoWhat do you then do when they upgrade/change the Quad SPI IC? A separate chip means a stable interface they can conform to.
- mrb 8y agoAltering the flash chip would be too obvious. It's a textbook 101 supply chain attack... Looking at the flash image (dumping it) or chip (x-raying it) would be the first thing anyone would do if they suspected something fishy. A tiny SPI man-in-the-middle chip sandwiched between the PCB fiberglass layers is a lot more discrete and more generic (same MitM chip fiddling with transmitted bytes can attack many different flash platforms, regardless of the sizes/pinouts/footprints of the flash chips).
- andrewstuart2 8y agoOr even, why make it visible on an x-ray when you could make it only visible on a microscope after cutting open an IC?