4 ms·
>I'd also like hashes of my firmware compared globally so I knew my firmware isn't special. And how do you know what is your firmware? surely you don't ask the
by aortega 12y ago
>I'd also like hashes of my firmware compared globally so I knew my firmware isn't special.
And how do you know what is your firmware? surely you don't ask the suspected firmware for a copy of itself. Do you extract from memory? how? maybe you can't. Anyway memory (flash, DRAM) controllers also are controlled via firmware. Do you trust your memory controller firmware to deliver the real firmware?
Do you compare it in your computer? do you trust it? do you trust the central hash database computer? do you trust the computers among the path?
Why comparing with others? you assume your firmware is special, but many firmware backdoors (I.E. home routers) affects all devices.
What you need is absolute control of the whole hardware manufacture and software chain, if you can pay a few millions for every computer like the military, then you can do it.
- sitkack 12y agoWe all know security isn't a binary relation. Step one is to know you aren't specifically targeted and keep your attack surface low. Your analysis leads to a paralyzing fatalism, which might have been your intent.