The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
1answer
55 views

Opensource firmware for WiFi router

I have two routers from D-link which are DIR615 and 2750U. Both of the firmware are upgraded to latest versions. They don't have bandwidth control. Found there are lots of opensource firmware ...
1
vote
1answer
32 views

security updates for embedded firmware Tomato (router) [closed]

I installed on my Linksys router Tomato firmware. I saw and now don't understand how security updates work. It can't be that there is no vulnerability since 2010. Tomato Firmware v1.28.1816 ...
7
votes
5answers
123 views

Script / method to erase USB flash drive content after a certain number of uses

I have a few bootable thumb drives with various OS's that I intend to let someone use. However, I need a way to ensure the USB drives can only be used once. Thus my question - is there a way to have a ...
2
votes
0answers
59 views

USB Rubber Ducky Firmware Upgrade [closed]

I just erased my firmware, using dfu-programmer-0.7.2: $ dfu-programmer at32uc3b1256 erase Checking memory from 0x2000 to 0x3FFFF... Not blank at 0x2001. Erasing flash... Success Checking memory from ...
-1
votes
1answer
60 views

Can Malware Infect Hardware/Firmware

So, my MacBook Pro packed it in over the weekend after I drunkenly vomited all over the keys. I brought it to the Apple store (without the hard drive installed) for an assessment. The results of this ...
1
vote
0answers
57 views

What can a malicious device on PCIe bus do? [closed]

What threat does a malicious device or a device with malicious firmware on a PCIe bus pose? Can such device access to RAM(only read or write)? All devices on PCIe can have that access(network card, or ...
1
vote
0answers
33 views

Firmware security [closed]

I plan to experiment with firmware securities. What security mechanisms are there that prohibit me from plugging in my personal firmware. I do understand some devices might be powerful in terms of ...
2
votes
0answers
74 views

nmap OS scan showing DD-WRT when I'm not running it?

This weekend, I set up pfSense on a spare box that I had sitting in the garage. It seems cool and powerful, but I haven't messed with it much yet. Was doing some basic nmap scanning from work against ...
2
votes
0answers
50 views

Open source firmware as mitigation against firmware persistent malware?

I am concerned about the threat of persistent malware entrenched in device firmware. I am not familiar with the intricacies of firmware security, so I am turning to SE for help. I recently learned of ...
4
votes
3answers
315 views

BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?

How many of you have actually updated their mouse, keyboard or USB stick firmware? How many vendor actually propose updates for such devices? However these devices firmware often offer a proprietary ...
1
vote
0answers
184 views

Adding a binary to the firmware of a routing device [closed]

I've been playing around with a router d-link dwr-921 and found some vulnerabilities in the web interface. I still haven't managed to get shell access and now I'm thinking about modifying the firmware ...
0
votes
2answers
65 views

Advantages of Enabling Firmware Password Protection

What security advantages, if any, would be gained by enabling Firmware Password Protection on a mac that allready has filevault encryption for the disk?
1
vote
2answers
250 views

How can the Equation Group HDD firmware malware help bypass FDE?

There is currently a lot of discussion going on across the Internet about the "Equation Group" family of malicious hard disk drive firmware. One thing that has me wondering is the claim that ...
2
votes
0answers
49 views

Airgapped network security: feasable to prevent precompiled code from running to limit vulnerability to hacked firmware?

I'm not sure if this is the right medium to ask this but I'm looking for pointers or if this is being done. I realize that this is still a bit of a open question. When internal network holds critical ...
1
vote
2answers
699 views

How exactly do you infect the firmware of a hard drive? [closed]

Now that we are told that infecting firmware has been done in practice, how exactly does this work?
3
votes
1answer
375 views

Security criteria for selecting a network switch?

I am looking to purchase a switch with 24+ ports. The set of security criteria that I should bear in mind when selecting a switch is not clear to me. I have tried to take other networking security ...
4
votes
1answer
333 views

Does malware which infects the BIOS/ Firmware always need 'root' access to do so?

There are very few hardened Operating Systems who restrict or totally disable Terminal 'root' access for the user. Would this feature prevent persistent BIOS rootkits from writing into BIOS or ...
3
votes
1answer
379 views

Which manufacturers who make BadUSB possible on their drives?

So as we all know by know BadUSB is possible on Phison 2251-03 chips. But are there any more reflashable devices in the wild that could be dangerous? And if there are is the firmware easily changed or ...
0
votes
1answer
705 views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
0
votes
1answer
448 views

How to ensure a second hand computer is safe to use [duplicate]

I'm planning to buy a second hand computer (2012 Mac mini, which is no longer available in stores). Because I'm not sure if there is any malware in the computer so I will perform hard format several ...
0
votes
1answer
305 views

Floppy disk partition showed up when USB Flash drive inserted

For one of my course's midterm lab portion, the professor provided us flash drives to put our project in. Everyone had their named labeled on one, so she gave me the last one left out, which had a ...
1
vote
2answers
228 views

Can BadUsb only be delivered via USB?

BadUsb works by infecting a computer when plugged into the USB port. Is it also possible for an attacker who gains control of a system, such as remote access, to then infect any connected USB ...
11
votes
5answers
1k views

Can the BadUSB exploit be prevented?

Recently I read a few things about the BadUSB exploit, for example: http://arstechnica.com/security/2014/07/this-thumbdrive-hacks-computers-badusb-exploit-makes-devices-turn-evil/ My understanding ...
3
votes
1answer
645 views

How difficult is the USB firmware attack? [closed]

Not really new but it's all over the news right now. You can hack a USB firmware to run an attack by emulating a keyboard. I wonder how difficult it is create an USB thumb that emulates a keyboard. ...
2
votes
1answer
279 views

Firmware Backdoor Protection

http://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface#Security_Risk Ubuntu Linux founder Mark Shuttleworth has likened ACPI to Trojan horses.[28] He has described proprietary ...
37
votes
4answers
3k views

How to know if firmware is stealing my information?

The recent news item Chinese Star N9500 Android smartphone contains factory-installed Trojan, says security firm has prompted me to think about firmware security. The news mentions the spyware is part ...
0
votes
1answer
118 views

How can I reprogram a USB to appear as a CD or HD?

I know this is possible either by modifying the firmware or doing something with the partition, but does anybody know how? This can be done? Specifically I am wanting the USB drive to read as a HD or ...
12
votes
2answers
9k views

Detecting and removing Absolute persistance technology

Absolute persistance technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
7
votes
5answers
7k views

Is dd-wrt generally more secure than manufacturer's firmware?

I have been advised to use dd-wrt, for richness of features and heightened security. The argument about security is that major manufacturers don't care much about the firmware, release with a lot of ...
6
votes
1answer
429 views

Can malicious code be contained outside the filesystem on a USB drive?

I've personally seen it recommended that every time a user inserts a USB thumb drive into a computer, that the thumb drive be scanned for potential malware and malicious code. However, if all that's ...
2
votes
1answer
13k views

Is PPTP VPN ever secure? Under DD-WRT? [duplicate]

PPTP is not an open, ratified standard the way that, for example, SSL/TLS is. (see: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.2 and http://datatracker.ietf.org/doc/rfc5246/ ) The ...
1
vote
1answer
1k views

Is it possible that my home ADSL router firmware was hacked?

I'm using a TP-LINK TD-8817 ADSL home router with a customized firmware from my ISP. When using the modem in router mode, I often redirected to a specific link owned by ISP. This is interesting ...
17
votes
1answer
709 views

Keyboard firmware hack - Linux vulnerable?

I see that Apple patched OS X to mitigate against K. Chen's famous Apple keyboard firmware hack. However: Apple keyboards can be used with computers running other operating systems; and in any ...
4
votes
1answer
1k views

Write-protection at hardware level for security

It seems to me that to maximise server security, one ought - in addition to the usual security measures implemented in software - to prevent the overwriting of certain parts of the server system, such ...
0
votes
1answer
163 views

Can plain text be hidden/accessed in laptop Firmware? (or elsewhere, not HDD/SSD)

Scenario: I just took 1 page of text (.odt) and copied it into a plain text document, that happens to result in a 3KB file. With that as a random size criteria for discussion, CAN code be written to ...
0
votes
3answers
2k views

very secure router and advice to prevent intrusion

I suspect that my home router was been hacked (with firmware upgrade), so that I would like to build and buy a new router enough secure. Something that can prevent not authorized firmware upgrade. I ...
2
votes
1answer
1k views

Extract SquashFS filesystem with shsq magic number [closed]

for a few days I was trying to extract the filesystem of a router firmware. Checking the image that the vendor provides I can see a SquashFS flag on it: DECIMAL HEX DESCRIPTION ...
-1
votes
1answer
230 views

Malware persistence past a drive wipe? [duplicate]

Are there any known instances of malware persisting past a drive wipe and reinstall, through modified bios, or firmware on one of the machine components?