Questions tagged [driver]
The driver tag has no usage guidance.
28
questions
1
vote
1answer
64 views
Rogue network printers as an attack vector in windows
I recently installed a new printer in our network. Just because I was interested, I switched to wireshark when scanning for and adding the printer on windows. I noticed that it was discoverd through ...
4
votes
1answer
330 views
Why does Windows still allow for the compromised/revoked and expired certificates to be used to sign drivers and load them?
Even if you have Secure Boot with the latest Windows 10 x64 update (build 19041), it is still possible to use a known compromised (stolen in 2015) and expired certificate to sign a driver and load it ...
0
votes
1answer
105 views
Cross-signing certificates for Windows Driver Signing
For testing purposes I want to test cross-signing certificates for Windows driver signing. I understand the general concept: Two root CAs, one root CA cross-signs the other root CA's public key.
...
1
vote
3answers
270 views
Can any Windows app install a kernel driver? if not, then how can Anti-Viruses install kernel drivers?
Can any application install a kernel driver? if not, then how Windows decides who can and who cannot?
If AVs can install kernel drivers, considering they are an application with an installer just like ...
2
votes
0answers
96 views
Computer that can't upgrade beyond Windows 1803 - safe to use until when? [closed]
I have an old computer that can't (at least according to Windows Update) upgrade beyond Windows 1803. (Probably due to the manufacturer not releasing updates to drivers.) Until when will it be safe to ...
1
vote
1answer
143 views
Securing IPC between kernel and user-mode application
We are currently developing a security software for Windows. This application consists of a service running in user mode and a driver in kernel mode. These two need to communicate, so that the service ...
-1
votes
1answer
95 views
Are kernel mode drivers harder to compromise? [closed]
Of course the effects of a compromised kernel mode driver are more disastrous, but are they harder to compromise in the first place?
1
vote
2answers
92 views
Driver separation?
are there any (at least on plan or theoretical level) that drivers will be/are/would be separated in general? ex.:
touchpad drivers shouldn't have to do anything with network access
wireless drivers ...
3
votes
1answer
159 views
Printer Driver Threats
In an environment where users connect their devices to printers through USB, the device will be prompted to install its driver if it's the first time. As far as I'm aware for OSX, the drivers are ...
1
vote
1answer
332 views
Can we stop aimbots by introducing a “Protected Input Path” that ensures that mouse input really comes from the mouse?
When playing First Person Shooters online it's possible to stumble on opponents using aimbots. They are really a plague, and I was wondering whether there is anything that can be done to block them.
...
1
vote
2answers
2k views
Airodump-ng doesn't capture handshake or sees any devices connected on Kali, but captures everything on Backtrack. How to fix it? [closed]
I ran into a problem in using kali linux system.
Kali doesn't allow me to see any devices connected to certain spot or capture any handshakes, I know that it can capture them(and see connected ...
2
votes
3answers
1k views
Unsigned windows driver
After regular Windows update I noticed that my video card's driver had suddenly stopped working. I made a rollback to a previous system backup and took a look at this video cards driver's information:
...
2
votes
2answers
105 views
How I rescue my hardware from a Trojan
I got some hardware from China that comes with a RAR archive containing a "driver installer" exe, as well as a file, lpk.dll, which appears to be a Trojan that infects RAR files.
I'm now quite ...
4
votes
2answers
202 views
Is it safe to install phone driver?
When I connect most Android phones to a Windows 7 computer via USB, Windows will install the appropriate drivers for the device.
My (possibly incorrect) understanding is that those drivers come with ...
1
vote
2answers
129 views
How to protect a PC against sensitive data access by malicious app/driver
As a software developer I frequently work with various USB-attached peripherals in the prototype stage and their drivers.
Sometimes the peripherals come from companies that I do not know well or ...
2
votes
1answer
488 views
Has any exploit leveraged a Video Driver flaw in WebGL?
Microsoft delayed support for WebGL due to the fact Javascript could exploit driver weaknesses.
In the years that have past, in WebGL's adoption, are there any exploits of WebGL that supports their ...
1
vote
1answer
526 views
Firmware backdoor in external hard drive without a specific driver possible?
I heard that researchers found some external hard drive with embedded backdoor (into the firmware).
I don't know if an external hard drive backdoor can be executed only by using a generic driver.
...
5
votes
1answer
251 views
Could the unused Mali GPU in the Libre Tea Computer Card be a security risk?
The Libre Tea Computer Card is a single-board computer that comes without any proprietary software (at least that’s the goal, it’s currently in crowdfunding):
[…] all firmware and kernel sources ...
3
votes
2answers
814 views
Can you trust driver download websites? [closed]
I am looking for a driver and typed the hardware ID into google. I found information as well as sites that offer the driver.
I am hesitant to accept the offer since they are not the original source ...
8
votes
1answer
526 views
How to mitigate risk of X11 buffer ghosting (palinopsia bug)
The Buffer "Ghosting" Phenomenon
It is possible to observe contents of (old and currently used) graphics buffers on a monitor under certain circumstances, posing an information disclosure risk, when ...
1
vote
1answer
238 views
Windows command line does not check for revoked certificates: How bad is it?
I recently updated my D-link wifi dongle driver. However, I had to do this through the command line because Microsoft revoked the D-link certificates after a leak. The executable would simply not ...
5
votes
3answers
357 views
How risky is to use non-free wireless network driver?
Intel wireless network adapter in my computer requires a non-free driver to work. I don't want to install non-free software to my debian system. However it is a notebook and without wireless network ...
0
votes
1answer
5k views
How does driver install with an expired cert?
I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
1
vote
1answer
92 views
Security implication of non-free drivers
I was wondering what the security implications are of using non-free drivers on a linux laptop. Especially for graphics and wifi.
3
votes
2answers
582 views
Can a Vulnerability Management tool highlight BIOS and driver-level vulnerabilities?
Several known vulnerabilities affect BIOS (Reference URLs below). So my question is, are the Vulnerability Management tools (such as Nessus, NeXpose, Qualys, etc) technically capable of highlighting ...
3
votes
0answers
219 views
Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?
I read from a link that says:
Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8
kernel before loading it. The Windows 8 kernel, ...
7
votes
2answers
3k views
What are the implications of including binary blobs in the Linux kernel?
According to this there are compelling reasons for caution when installing obfuscated binaries. Knowing this, how can running binary blobs as a part of the Linux kernel be acceptable from a security ...
16
votes
2answers
2k views
Is OpenGL a security problem?
Today, almost all desktop and most mobile operating systems and devices support some version of OpenGL. I'm wondering about the security implications of that:
In many cases, the GPU has complete and ...
