Tag Info

New answers tagged

1

This video demonstrates a complete re-soldering of a laptop BIOS chip in 10 minutes: https://www.youtube.com/watch?v=HMAxv6lgSuw Joanna Rutkowska (girl behind the Blue Pill rootkit) discusses the feasibility of a "Ring -3" rootkit of the SMM which resides on the BIOS chip: ...


0

I like André's answer of having a switch or button to program the firmware. Some devices already have this, many motherboards for example have a jumper to protect the BIOS against writing. Forcing the device to not function properly in firmware program mode would allow a user to see if something was iffy. Like an audio device that output no audio, or a ...


0

The only way it could be completely prevented is to not have any type of writable non-volatile memory on the device. The problem with this is it would prevent the the firmware from ever being changed which could complicate things. The issue these days, from my understanding, is there needs to be low level read/write commands to access spaces in memory ...


3

One solution is to require all firmware to be signed and have the device check the signature before writing that firmware image to its memory; my current laptop has an option to enable this in its BIOS (the option is permanent - if I enable it now I can't disable it anymore, that's why I didn't enable it). There are many drawbacks however : induces a ...


0

If you don't have a hardware switch or don't trust the physical switch itself there is a hardware solution that will work, but requires copying data. Burn your OS image to a dvd or hard drive and verify it with a hash. This is your back up. Now copy it to a few usb 3 drives, since they are cheap these days. Each time you boot with one, it will be ...


0

I don't think it is useful to think of absolutes here. Tamper proofing is something that is done in degrees. What is more useful is to think of the level of tampering that is possible, and the level of determination a user needs to show in order to reverse engineer your product. Is the tamper proofing supposed to stop against grade school kids, industrial ...


1

This is a great question! Never thought about this until you asked. Firstly, code running inside a secure enclave runs in ring 3. So all restrictions that apply to untrusted non enclave ring 3 code apply. So an enclave cannot write to MSR's. Next, the specs don't explicitly mention anything about MSR's but it does tell you about interaction with IA32 ...


3

Can This be done? I would say yes, but with some caveats. Depending on the cable and the data, you would need some very expensive / sensitive equipment to pull this off. To me this is a similar issue to the old Van Eck Phreaking (http://en.wikipedia.org/wiki/Van_Eck_phreaking). Intel has some tech to circumvent this kind of attack: ...


0

consoles these days are completely closed ecosystems, to the point where their components are not even interchangeable ( for example a Xbox internal hard drive cannot be inserted into another xbox, or the flash memory which stores the operating system and settings on the Nintendo 3ds is encrypted with a key which is unique to the console ) They are not ...



Top 50 recent answers are included