169 reputation
4
bio website None
location California
age 28
visits member for 3 years, 8 months
seen Oct 24 at 21:10

System Admin with a programming habit.


Aug
13
comment What are the biggest security concerns on PXE?
@Pat I'm not blaming PXE at all for this. I'm just saying that since this environment exists, that is a place I can inject myself. These sort of attacks are usually possible with other network-based provisioning systems, as long as I can adequately spoof enough of a corporate system to allow me to download the image.
Aug
13
comment What are the biggest security concerns on PXE?
1st off: If I can get physical access in the environment, I can plug something between the computer and the switch that can manipulate traffic. Therefore, that device would just need to capture and not re-propigate broadcasts. No race condition necessary.