3 ms·
If I remember correctly you are able to exploit DMA access through firewire by creating an iPod that would be able to dump the contents of memory to the hard dr
by zitterbewegung 16y ago
If I remember correctly you are able to exploit DMA access through firewire by creating an iPod that would be able to dump the contents of memory to the hard drive. If you had DMA access using Thunderbolt you could dump the contents of memory in a very short time!
- __david__ 16y agoAnd even better, you can get access to the other PCIe devices--in particular the SATA devices. Though it might be tough to talk to devices that the main processor is actively using. Even if you somehow disable interrupts on the device, the potential for conflicts (leading to data corruption) seems amazingly high.
- wmf 16y agoRather than talking to the disk controller over Thunderbolt, I would use TB to insert a rootkit in the kernel that would use the standard APIs to read the disk. Similar to this: http://esec-lab.sogeti.com/dotclear/index.php?post/2010/11/21/Presentation-at-Hack.lu-:-Reversing-the-Broacom-NetExtreme-s-firmware http://esec-lab.sogeti.com/dotclear/index.php?post/2010/11/2...