With the recent release of vault 7 was just wondering if you were to purchase a piece of network equipment off of eBay (or anything else for that matter?) that the CIA installed malware onto, how would you go about removing that?

Would a firmware reinstall be enough to fix that?



  • the installed malware is only present within the storage that gets overwritten by a firmware reinstall

  • you can trust the firmware you're about to reinstall, and

  • you can trust the mechanism by which you reinstall that firmware

then yes, it would be enough.

  • 1
    i don't see how the avg or even advanced user can possibly verify 1+3...
    – dandavis
    Mar 9 '17 at 22:20
  • 1 can be verified by analysing the design - it's possible there's only one writeable storage chip in the device. Clearing this would remove all malware. Verifying 2 would likely require using something like JTAG. Mar 13 '17 at 23:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.