2 ms·
Wouldn’t a malicious device be smart enough to lie to you about what’s in /system?
by brookst 3y ago
Wouldn’t a malicious device be smart enough to lie to you about what’s in /system?
- supriyo-biswas 3y agoTechnically, yes, but it is quite difficult to perform a realistic emulation of an OS with shell facilities, as evidenced by all the system emulation issues on SSH honeypots e.g. cowrie[1]. [1] https://github.com/cowrie/cowrie/issues https://github.com/cowrie/cowrie/issues
- AnthonyMouse 3y agoThis is why the storage shouldn't be soldered. Then you could remove the drive and plug it into a known-clean system to inspect it. Technically the drive itself could have malicious firmware (and this is another reason open source device firmware is important; it allows researchers to poke around). But if the storage was removable then you could also replace the drive entirely and copy the original drive's contents to it. Then if the original drive was giving a clean copy if you attempt to dump its contents, the clean copy is what ends up on the new drive.