3 ms·
That assume it presents as a HID, and not another device profile with more direct attack surface in the hardware or kernel. Windows isolates the USB drivers to
by manwe150 5y ago
That assume it presents as a HID, and not another device profile with more direct attack surface in the hardware or kernel. Windows isolates the USB drivers to thwart such attacks, but perhaps it could manage to attack memory directly through the PCI bus before the kernel’s involvement?
I am not sure of the details, but agree that seems like a rather large amount of hacker effort, when they can currently attack over the internet and demand instant bitcoin payment.
- gruez 5y ago> Windows isolates the USB drivers to thwart such attacks, but perhaps it could manage to attack memory directly through the PCI bus before the kernel’s involvement? AFAIK how these attacks essentially work is by imputing key sequences to execute malicious code (eg. typing curl ... | bash into the terminal). There's no driver or pcie/DMA attacks going on.