3

With the recent release of vault 7 was just wondering if you were to purchase a piece of network equipment off of eBay (or anything else for that matter?) that the CIA installed malware onto, how would you go about removing that?

Would a firmware reinstall be enough to fix that?

Improve this question

1 Answer 1

Reset to default
3

If

  • the installed malware is only present within the storage that gets overwritten by a firmware reinstall

  • you can trust the firmware you're about to reinstall, and

  • you can trust the mechanism by which you reinstall that firmware

then yes, it would be enough.

Improve this answer
2
  • 1
    i don't see how the avg or even advanced user can possibly verify 1+3...
    – dandavis
    Commented Mar 9, 2017 at 22:20
  • 1 can be verified by analysing the design - it's possible there's only one writeable storage chip in the device. Clearing this would remove all malware. Verifying 2 would likely require using something like JTAG.
    – SomeoneSomewhereSupportsMonica
    Commented Mar 13, 2017 at 23:51

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .