Questions tagged [driver]
The driver tag has no usage guidance.
27
questions
0
votes
1answer
42 views
Cross-signing certificates for Windows Driver Signing
For testing purposes I want to test cross-signing certificates for Windows driver signing. I understand the general concept: Two root CAs, one root CA cross-signs the other root CA's public key.
...
1
vote
3answers
124 views
Can any Windows app install a kernel driver? if not, then how can Anti-Viruses install kernel drivers?
Can any application install a kernel driver? if not, then how Windows decides who can and who cannot?
If AVs can install kernel drivers, considering they are an application with an installer just like ...
0
votes
0answers
58 views
Will my Windows driver stop being reported as malware if signed? [duplicate]
I have developed an IRP hooking based driver for one of my clients. Avast oes not complain about it but his AV suite reports it as malware. The lient will eventually sign this driver, but will it ...
2
votes
0answers
82 views
Computer that can't upgrade beyond Windows 1803 - safe to use until when? [closed]
I have an old computer that can't (at least according to Windows Update) upgrade beyond Windows 1803. (Probably due to the manufacturer not releasing updates to drivers.) Until when will it be safe to ...
1
vote
1answer
107 views
Securing IPC between kernel and user-mode application
We are currently developing a security software for Windows. This application consists of a service running in user mode and a driver in kernel mode. These two need to communicate, so that the service ...
-1
votes
1answer
74 views
Are kernel mode drivers harder to compromise? [closed]
Of course the effects of a compromised kernel mode driver are more disastrous, but are they harder to compromise in the first place?
1
vote
2answers
79 views
Driver separation?
are there any (at least on plan or theoretical level) that drivers will be/are/would be separated in general? ex.:
touchpad drivers shouldn't have to do anything with network access
wireless drivers ...
3
votes
1answer
146 views
Printer Driver Threats
In an environment where users connect their devices to printers through USB, the device will be prompted to install its driver if it's the first time. As far as I'm aware for OSX, the drivers are ...
1
vote
1answer
174 views
Can we stop aimbots by introducing a “Protected Input Path” that ensures that mouse input really comes from the mouse?
When playing First Person Shooters online it's possible to stumble on opponents using aimbots. They are really a plague, and I was wondering whether there is anything that can be done to block them.
...
1
vote
2answers
1k views
Airodump-ng doesn't capture handshake or sees any devices connected on Kali, but captures everything on Backtrack. How to fix it? [closed]
I ran into a problem in using kali linux system.
Kali doesn't allow me to see any devices connected to certain spot or capture any handshakes, I know that it can capture them(and see connected ...
1
vote
3answers
871 views
Unsigned windows driver
After regular Windows update I noticed that my video card's driver had suddenly stopped working. I made a rollback to a previous system backup and took a look at this video cards driver's information:
...
2
votes
2answers
100 views
How I rescue my hardware from a Trojan
I got some hardware from China that comes with a RAR archive containing a "driver installer" exe, as well as a file, lpk.dll, which appears to be a Trojan that infects RAR files.
I'm now quite ...
4
votes
2answers
118 views
Is it safe to install phone driver?
When I connect most Android phones to a Windows 7 computer via USB, Windows will install the appropriate drivers for the device.
My (possibly incorrect) understanding is that those drivers come with ...
1
vote
2answers
114 views
How to protect a PC against sensitive data access by malicious app/driver
As a software developer I frequently work with various USB-attached peripherals in the prototype stage and their drivers.
Sometimes the peripherals come from companies that I do not know well or ...
2
votes
1answer
417 views
Has any exploit leveraged a Video Driver flaw in WebGL?
Microsoft delayed support for WebGL due to the fact Javascript could exploit driver weaknesses.
In the years that have past, in WebGL's adoption, are there any exploits of WebGL that supports their ...
1
vote
1answer
460 views
Firmware backdoor in external hard drive without a specific driver possible?
I heard that researchers found some external hard drive with embedded backdoor (into the firmware).
I don't know if an external hard drive backdoor can be executed only by using a generic driver.
...
5
votes
1answer
239 views
Could the unused Mali GPU in the Libre Tea Computer Card be a security risk?
The Libre Tea Computer Card is a single-board computer that comes without any proprietary software (at least that’s the goal, it’s currently in crowdfunding):
[…] all firmware and kernel sources ...
3
votes
2answers
662 views
Can you trust driver download websites? [closed]
I am looking for a driver and typed the hardware ID into google. I found information as well as sites that offer the driver.
I am hesitant to accept the offer since they are not the original source ...
7
votes
1answer
416 views
How to mitigate risk of X11 buffer ghosting (palinopsia bug)
The Buffer "Ghosting" Phenomenon
It is possible to observe contents of (old and currently used) graphics buffers on a monitor under certain circumstances, posing an information disclosure risk, when ...
1
vote
1answer
218 views
Windows command line does not check for revoked certificates: How bad is it?
I recently updated my D-link wifi dongle driver. However, I had to do this through the command line because Microsoft revoked the D-link certificates after a leak. The executable would simply not ...
5
votes
3answers
300 views
How risky is to use non-free wireless network driver?
Intel wireless network adapter in my computer requires a non-free driver to work. I don't want to install non-free software to my debian system. However it is a notebook and without wireless network ...
0
votes
1answer
4k views
How does driver install with an expired cert?
I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
1
vote
1answer
89 views
Security implication of non-free drivers
I was wondering what the security implications are of using non-free drivers on a linux laptop. Especially for graphics and wifi.
3
votes
2answers
514 views
Can a Vulnerability Management tool highlight BIOS and driver-level vulnerabilities?
Several known vulnerabilities affect BIOS (Reference URLs below). So my question is, are the Vulnerability Management tools (such as Nessus, NeXpose, Qualys, etc) technically capable of highlighting ...
3
votes
0answers
218 views
Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?
I read from a link that says:
Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8
kernel before loading it. The Windows 8 kernel, ...
7
votes
2answers
3k views
What are the implications of including binary blobs in the Linux kernel?
According to this there are compelling reasons for caution when installing obfuscated binaries. Knowing this, how can running binary blobs as a part of the Linux kernel be acceptable from a security ...
16
votes
2answers
2k views
Is OpenGL a security problem?
Today, almost all desktop and most mobile operating systems and devices support some version of OpenGL. I'm wondering about the security implications of that:
In many cases, the GPU has complete and ...
