4 ms·
If you can modify the firmware to rw this region then you can modify the housekeeping code to leave that it alone until there is no more free space. Furthermore
by jacob019 5y ago
If you can modify the firmware to rw this region then you can modify the housekeeping code to leave that it alone until there is no more free space. Furthermore some reserved regions nay be completely unused until you have failing cells, which may never happen.
Conceivably an SSD virus could use the controller's CPU to hot patch the system with a persistent rootkit. It's been done before with harddrives.
- Sayrus 5y agoIf you control the firmware already, you don't even need over-provisioning. You basically have a higher access-level. A disk is rarely 100% full so you could easily squeeze a few megabytes on a non-overprovisioned disk. Depending on how powerful the controller is, you can hide your malware inside it, you can compress some part of the disk to make space for yourself, ... On a malicious firmware, you can make it so the host won't see the content unless it is queried "properly". Or the controller can return malicious content when queried.