5 ms·
Ctrl+alt+t (insert malicious shell command)
by Koffiepoeder 3y ago
Ctrl+alt+t
(insert malicious shell command)
- TylerE 3y agoOk, but any reasonable threat model has assumed forever that physical access to the machine is essentially game over regardless. Or to put it another way... who cares about that when the adversary is in position to just do a snatch and grab of the whole device?
- stavros 3y agoWireless protocols don't count as physical access, since I can perform the attack from a car outside your house.
- jeroenhd 3y agoThis is an automatic bluetooth pairing attack. With the right equipment (which can be as simple as a Pringles can and an antenna aimed through a window) you can execute this attack from a hundred meters away. That's not physical access.
- 127361 3y agoEven more scary: (launch child porn web site)
- overstay8930 3y agoThat is only part of the CVSS scoring system. Not only do you need near-physical access (i.e. not open to the internet, already drops the rating significantly), it requires the victim to interact with a suspicious prompt, which basically drops it to the level of a phishing email (i.e. not CVSS 8.8).
- fomine3 3y agoNo victim operation is needed, just type it by automated pseudo HID device