4 ms·
And on USB, don't forget SMM code emulating PS/2 input devices by parsing USB HID packets. I think part of the reason why real mode exploits was never very comm
by yuhong 13y ago
And on USB, don't forget SMM code emulating PS/2 input devices by parsing USB HID packets. I think part of the reason why real mode exploits was never very common was that the address DOS allocated memory depended on for example what TSRs you were running.
- rst 13y agoRemember that story a few months ago about how some government agency had replaced all its keyboards and mice in response to a malware infestation? A lot of folks (including some here) took this as Yet Another Show of Government Cluelessness. I found myself wondering instead if there was a world in which folks advised by government security experts (i.e., you-know-who) would have a good reason to do something like this and not say why. There is. It's a world in which their opponents had a zero-day against the Windows USB driver, and a way into the government's supply chain. And in which you-know-who wants to play the same game themselves against opponents elsewhere.
- wiml 13y agoThey don't need a way into the government's supply chain if the keyboards and mice have processors whose firmware is updatable over USB. Which is not exactly rare. PoC: http://it.slashdot.org/story/09/08/01/1658258/apple-keyboard-firmware-hack-demonstrated http://it.slashdot.org/story/09/08/01/1658258/apple-keyboard...