3 ms·
and do what? the article lacks any inspiration, like it says you can get into the admin panel, but what does the admin panel let you do? can you change a subtle
by vmception 5y ago
and do what? the article lacks any inspiration, like it says you can get into the admin panel, but what does the admin panel let you do? can you change a subtle address to get some of the bitcoin fees for yourself? raise the fees to 100%?
the article then mentions some stuff like access to the bootloader, which of course means you could flash a more capable admin panel into that lets you do way more like take everyone's bitcoin
but what about the default admin panel?
- gizdan 5y agoI mean all of that tells me that you could do whatever you really want. Never mind the admin panel, even if it won't let you change the wallet, overwriting the firmware would certainly allow you to change the wallet where Bitcoins go.
- vmception 5y agoyeah I know, I already covered that > the article then mentions some stuff like access to the bootloader, which of course means you could flash a more capable admin panel into that lets you do way more like take everyone's bitcoin I was just wondering why they would spend so much time talking about the lower effort stuff, if it doesn't do anything. I'm sure it does something bad, but I can't go over to my convenience store and say "someone might change the convenience fee to a slightly higher percentage!" to get them to do anything, if thats the extent of the attack surface for just the admin panel if its already surveilled, so its useful to be able to say exactly why I can imagine social engineering would allow a fake technician to come and service the machine though, with a hat and a voluntary personal mask mandate not being conspicuous right now. It would look so much more official to have a bunch of cables and computer doing a firmware flash lol.