3 ms·
We already have that today. And locked down systems don't prevent it, because you can always exploit some part of the supply chain. A determined actor will alwa
by shakna 1y ago
We already have that today. And locked down systems don't prevent it, because you can always exploit some part of the supply chain. A determined actor will always find a path.
- judge2020 1y agoRight now you'd need a zero-day bootrom exploit to do something like this - still a possibility for the average high-level intelligence operative, but not the average white collar citizen. The proposal is making such a thing a feature.
- shakna 1y agoStuxnet did not require a bootrom zero day. Just people's propensity to plug in USB devices out of curiosity. You don't need the NSA to target someone and replace their device with a malware driven one. Just a porch pirate and your own delivery - two to three years and you're almost guaranteed an attack window.