In his presentation, A Monitor Darkly, Ang Cui demonstrates how to manipulate images on the monitor by getting the firmware to execute commands embedded in a pixel contained in an image being displayed.
At first, he mentions that this is being done to a monitor with an firmware implant with the firmware acting asthe command-and-control, but later he says
We take this pixel, we put it on the internet... We can put this pixel on photos... videos... movies... And once we do this we can distribute this pixel down to millions and milions of monitors and we can update them all at the same time and we can have direct command-and-control down to those exact monitors.
Does getting this exploit to work require physical compromise of the device, i.e., having had the monitor manually installed on the device?
Whereas in the presentation, he the code he executes are used to change images on the display, are other kinds of code execution possible with this? Would the only possible effects from using this exploit be relegated to the images displayed with no permenent changes to disk/operating system? What's the worst that can be done with this exploit?
Finally, if I suspect and implant were loaded onto my monitor, are there any ways of detecting it and would reflashing the firmware be enough to get rid of it?