The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
0answers
43 views

List of devices vulnerable to bad USB

I come across a site once where they had a huge list of tested devices that were vulnerable to the bad USB exploit. In this list were USB devices like keyboards, webcams, network usb sticks and ...
0
votes
2answers
24 views

Advantages of Enabling Firmware Password Protection

What security advantages, if any, would be gained by enabling Firmware Password Protection on a mac that allready has filevault encryption for the disk?
1
vote
2answers
177 views

How can the Equation Group HDD firmware malware help bypass FDE?

There is currently a lot of discussion going on across the Internet about the "Equation Group" family of malicious hard disk drive firmware. One thing that has me wondering is the claim that ...
2
votes
0answers
35 views

Airgapped network security: feasable to prevent precompiled code from running to limit vulnerability to hacked firmware?

I'm not sure if this is the right medium to ask this but I'm looking for pointers or if this is being done. I realize that this is still a bit of a open question. When internal network holds critical ...
1
vote
2answers
454 views

How exactly do you infect the firmware of a hard drive? [closed]

Now that we are told that infecting firmware has been done in practice, how exactly does this work?
1
vote
1answer
220 views

Security criteria for selecting a network switch?

I am looking to purchase a switch with 24+ ports. The set of security criteria that I should bear in mind when selecting a switch is not clear to me. I have tried to take other networking security ...
3
votes
1answer
218 views

Does malware which infects the BIOS/ Firmware always need 'root' access to do so?

There are very few hardend Operating Systems who restrict or totally disable Terminal 'root' access for the user. (1) Would this feature prevent persistant BIOS rootkits from writing into BIOS or ...
3
votes
1answer
182 views

Which manufacturers who make BadUSB possible on their drives?

So as we all know by know BadUSB is possible on Phison 2251-03 chips. But are there any more reflashable devices in the wild that could be dangerous? And if there are is the firmware easily changed or ...
0
votes
1answer
332 views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
0
votes
1answer
200 views

How to ensure a second hand computer is safe to use [duplicate]

I'm planning to buy a second hand computer (2012 Mac mini, which is no longer available in stores). Because I'm not sure if there is any malware in the computer so I will perform hard format several ...
0
votes
1answer
134 views

Floppy disk partition showed up when USB Flash drive inserted

For one of my course's midterm lab portion, the professor provided us flash drives to put our project in. Everyone had their named labeled on one, so she gave me the last one left out, which had a ...
1
vote
2answers
185 views

Can BadUsb only be delivered via USB?

BadUsb works by infecting a computer when plugged into the USB port. Is it also possible for an attacker who gains control of a system, such as remote access, to then infect any connected USB ...
8
votes
5answers
1k views

Can the BadUSB exploit be prevented?

Recently I read a few things about the BadUSB exploit, for example: http://arstechnica.com/security/2014/07/this-thumbdrive-hacks-computers-badusb-exploit-makes-devices-turn-evil/ My understanding ...
3
votes
1answer
513 views

How difficult is the USB firmware attack? [closed]

Not really new but it's all over the news right now. You can hack a USB firmware to run an attack by emulating a keyboard. I wonder how difficult it is create an USB thumb that emulates a keyboard. ...
1
vote
1answer
220 views

Firmware Backdoor Protection

http://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface#Security_Risk Ubuntu Linux founder Mark Shuttleworth has likened ACPI to Trojan horses.[28] He has described proprietary ...
37
votes
4answers
3k views

How to know if firmware is stealing my information?

The recent news item Chinese Star N9500 Android smartphone contains factory-installed Trojan, says security firm has prompted me to think about firmware security. The news mentions the spyware is part ...
0
votes
1answer
99 views

How can I reprogram a USB to appear as a CD or HD?

I know this is possible either by modifying the firmware or doing something with the partition, but does anybody know how? This can be done? Specifically I am wanting the USB drive to read as a HD or ...
10
votes
2answers
5k views

Detecting and removing Absolute persistance technology

Absolute persistance technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
6
votes
5answers
5k views

Is dd-wrt generally more secure than manufacturer's firmware?

I have been advised to use dd-wrt, for richness of features and heightened security. The argument about security is that major manufacturers don't care much about the firmware, release with a lot of ...
6
votes
1answer
389 views

Can malicious code be contained outside the filesystem on a USB drive?

I've personally seen it recommended that every time a user inserts a USB thumb drive into a computer, that the thumb drive be scanned for potential malware and malicious code. However, if all that's ...
1
vote
1answer
8k views

Is PPTP VPN ever secure? Under DD-WRT? [duplicate]

PPTP is not an open, ratified standard the way that, for example, SSL/TLS is. (see: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.2 and http://datatracker.ietf.org/doc/rfc5246/ ) The ...
1
vote
1answer
888 views

Is it possible that my home ADSL router firmware was hacked?

I'm using a TP-LINK TD-8817 ADSL home router with a customized firmware from my ISP. When using the modem in router mode, I often redirected to a specific link owned by ISP. This is interesting ...
17
votes
1answer
623 views

Keyboard firmware hack - Linux vulnerable?

I see that Apple patched OS X to mitigate against K. Chen's famous Apple keyboard firmware hack. However: Apple keyboards can be used with computers running other operating systems; and in any ...
4
votes
1answer
828 views

Write-protection at hardware level for security

It seems to me that to maximise server security, one ought - in addition to the usual security measures implemented in software - to prevent the overwriting of certain parts of the server system, such ...
0
votes
1answer
153 views

Can plain text be hidden/accessed in laptop Firmware? (or elsewhere, not HDD/SSD)

Scenario: I just took 1 page of text (.odt) and copied it into a plain text document, that happens to result in a 3KB file. With that as a random size criteria for discussion, CAN code be written to ...
0
votes
3answers
2k views

very secure router and advice to prevent intrusion

I suspect that my home router was been hacked (with firmware upgrade), so that I would like to build and buy a new router enough secure. Something that can prevent not authorized firmware upgrade. I ...
2
votes
1answer
1k views

Extract SquashFS filesystem with shsq magic number [closed]

for a few days I was trying to extract the filesystem of a router firmware. Checking the image that the vendor provides I can see a SquashFS flag on it: DECIMAL HEX DESCRIPTION ...
-1
votes
1answer
197 views

Malware persistence past a drive wipe? [duplicate]

Are there any known instances of malware persisting past a drive wipe and reinstall, through modified bios, or firmware on one of the machine components?