5 ms·
> So you already have to be in ring 0. Yes, but the article implies that you can e.g. do bad things in a bootloader and then have the OS run while the exploit
by exDM69 11y ago
> So you already have to be in ring 0.
Yes, but the article implies that you can e.g. do bad things in a bootloader and then have the OS run while the exploit stays resident and undetected by the OS.
This definitely has previously undocumented exploit potential if you can force the target to e.g. boot from a malicious USB device.
- edmccard 11y ago>if you can force the target to e.g. boot from a malicious USB device. If you can control the boot media, aren't you already past the point where you need further exploits to control the machine?
- exDM69 11y agoYes - but that's a bit besides the point. The situation is a lot worse if you can remain undetected after tampering with the boot media or firmware. This can be a lot more damaging than a ring-0 exploit.