3 ms·
I mean all of that tells me that you could do whatever you really want. Never mind the admin panel, even if it won't let you change the wallet, overwriting the
by gizdan 5y ago
I mean all of that tells me that you could do whatever you really want. Never mind the admin panel, even if it won't let you change the wallet, overwriting the firmware would certainly allow you to change the wallet where Bitcoins go.
- vmception 5y agoyeah I know, I already covered that > the article then mentions some stuff like access to the bootloader, which of course means you could flash a more capable admin panel into that lets you do way more like take everyone's bitcoin I was just wondering why they would spend so much time talking about the lower effort stuff, if it doesn't do anything. I'm sure it does something bad, but I can't go over to my convenience store and say "someone might change the convenience fee to a slightly higher percentage!" to get them to do anything, if thats the extent of the attack surface for just the admin panel if its already surveilled, so its useful to be able to say exactly why I can imagine social engineering would allow a fake technician to come and service the machine though, with a hat and a voluntary personal mask mandate not being conspicuous right now. It would look so much more official to have a bunch of cables and computer doing a firmware flash lol.