4 ms·
>protects its systems with an extra code provided over the telephone, but the hackers circumvented this double authorization by changing the telephone numbers
by FirmwareBurner 3y ago
>protects its systems with an extra code provided over the telephone, but the hackers circumvented this double authorization by changing the telephone numbers
How do you change the phone number without access to the phone authenticator in the first place?
>states that the hackers caused no material damage, but did steal intellectual property
I wonder what valuable IP they could have gotten, as last time I interacted with them, they had their hardware design files on airgapped networks for which you needed a second laptop to access and had no internet connection or open USB ports making hacking impossible. But that was a long time ago.
- llamaInSouth 3y ago> How do you change the phone number without access to the phone authenticator in the first place? You can contact the phone company if using a cellphone (i.e. transfer the phone number to a new sim) When my phone was stolen a few weeks ago, I tried to transfer my phone number to a different company but they wouldnt let me... they told me all I had to do was buy a sim card from the same company. Security is a joke (also physical security).
- okl 3y agoI guess they changed a phone number in the Active Directory to which the TFA-SMS was sent?
- belter 3y agoAirgapped networks can be bridged.
- ratg13 3y agoOnly by a physical person. Otherwise it's not an airgapped network.
- j-bos 3y agoI mean the Iranian centerfuges smashed by stuxnet were also airgapped.
- belter 3y agoNot at all. I can turn on your airgapped computer from the street without getting into your building... Intel Management Engine - https://en.wikipedia.org/wiki/Intel_Management_Engine https://en.wikipedia.org/wiki/Intel_Management_Engine "Several weaknesses have been found in the ME. On May 1, 2017, Intel confirmed a Remote Elevation of Privilege bug (SA-00075) in its Management Technology.[36] Every Intel platform with provisioned Intel Standard Manageability, Active Management Technology, or Small Business Technology, from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME" https://www.intel.com/content/www/us/en/developer/tools/in-band-manageability/overview.html https://www.intel.com/content/www/us/en/developer/tools/in-b...
- simbolit 3y agoIf you don't add an antenna to your airgapped computer, you need physical access to some copper. If you do add an antenna to your 'airgapped' computer, well, just don't. Is there a third way?
- bitcharmer 3y agoI don't think you understand what "air-gapped" actually means
- yorwba 3y agoAnd how do you establish the connection to deploy your remote privilege escalation exploit against the Intel Management Engine?
- belter 3y agoHey I am not ChatGPT :-) But the answer has three parts: 1- "...The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off..." 2- The Intel Management Engine is the remote privilege escalation.(Read on the known and unpublished vulnerabilities). 3- Over-the-Air Firmware Updates... If I say more we both will end on a secure facility.
- 3y ago
- FirmwareBurner 3y ago>Airgapped networks are can bridged. Not via the processes discussed in the article.