Questions tagged [firmware]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
95 views

Used laptop with potential BIOS/SSD firmware malware

I bought a used laptop and I'm concerned about the integrity of the firmware on the hardware and bios. I realize these types of malware are very rare. 1) My question is that if I assume that the BIOS ...
1
vote
0answers
55 views

Where are the drivers stored on usb receivers? [closed]

I am wondering where the firmware / driver is stored on these devices? If it cannot be used as a storage device, how could it possibly store any firmware for itself? How could I access these "files"? ...
1
vote
2answers
81 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
29
votes
5answers
3k views

How to verify if router firmware is legitimate

I have read that router firmware is supposed to be patched. How do I verify that the firmware update is indeed a unmodified version of the firmware? I know about signature checking, but how would I ...
1
vote
0answers
68 views

Bought used IP security camera, should I reflash the firmware?

I bought an used IP security camera on eBay, I dont know who was the previous owner. I've always thought that we can't trust 100% any firmwares/OSes that were been installed or used by someone else. ...
1
vote
1answer
214 views

How can I verify that my laptop does not have malware in the firmware? [duplicate]

I purchased a used laptop on eBay. I scrubbed the hard disk to make sure there were no lingering or unknown viruses left on the disk and then installed fresh Windows 10. But, what about the firmware?...
1
vote
4answers
197 views

Ransomware aversion and identification techniques

I don't think there's a need to go into the background here, but identification of the process may be better explored. From a developer pov, at a high level, the files are modified, by virtue of the ...
2
votes
1answer
148 views

Non-upgradable usb device against badUSB

Lot of posts about badUSB (here and there) suggest to use a PS/2 connector for mouse and keyboard or to whitelisted USB devices or even use a hardware firewall that only allows whitelisted commands. ...
3
votes
2answers
113 views

What is the best strategy for handling a compromised private key within the domain of firmware?

I have a firmware project that uses asymmetric cryptography for assuring integrity and authority of updates. The private key is stored within the company, and the public key is on the firmware to ...
1
vote
1answer
60 views

Does encapsulation of encryption within a library provide some kind of additional security?

Lets say there is an industrial device communicating with a central system. Secure communication is required from an end to end point of view. From time to time keys of the devices must be renewed by ...
1
vote
1answer
91 views

Is there such a thing as a modern cable modem without an onboard operating system? [closed]

Is there such a thing as a modern cable modem without an onboard operating system? I’m looking for examples of specific models, in particular. Every modem I’ve looked at has a Web interface (e.g., ...
2
votes
3answers
175 views

Do I need to worry about vulnerabilities that require administrative privileges to exploit?

I am currently evaluating the impact that the recent NUC Firmware Advisory has on our machines. What confuses me is that fact that those vulerabilities are scored with a high risk score, but require(...
1
vote
1answer
171 views

What can a compromised firmware (UEFI) do after the hard-disk has been wiped?

I might be mistaken, but it seems the firmware (UEFI) needs to load some stuff from the disk to be able to do anything really interesting, like loading some advanced tools or loading the OS. Yet ...
0
votes
1answer
443 views

Does secure boot protects against firmware rootkits and GPT bootkits?

This question is related but only partialy answers my question. I know firmware (most notably UEFI firmware) rootkits or bootkits are rare and possiblity to introduce one into system is very low, but ...
0
votes
0answers
100 views

Could this be a sign of firmware infection?

I am burning an iso onto a CD using CD burning software. Before burning I take the 512sum of the image. After burning, I extract the image off the CD and check the sum again to make sure, and I get an ...
97
votes
9answers
22k views

Buying a “Used” Router

I am buying a "new" router from an open-box sale at a company that liquidates eCommerce returns. Plan to use it for a home network at cottage. I'm a bit nervous that it could have been modified by ...
0
votes
0answers
40 views

There are cached icons and screenshots from another person, am I hacked? [duplicate]

I'm running Ubuntu bionic 16.04 LTS and there are being constantly added new files into the ~/.cache/gnome-software/ directory. I've uploaded all of them into this new GitLab repository, so that you ...
1
vote
1answer
113 views

100% detectable backdoor attacks on network

Every article I have read on backdoor attack prevention says pretty much this: Protecting against them may be difficult. I am tired of reading how it can be ~difficult~ to protect against. ...
2
votes
1answer
187 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
0
votes
1answer
387 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
0
votes
1answer
338 views

How can you reset a UEFI completely in case of a firmware infection?

I haven't really understood whether firmware level infection (on either motherboard or drives) can actually be a thing without physical access, however how can one factory reset the firmware in that ...
6
votes
2answers
562 views

Is it possible to take an image of the firmware of HDD and SSD?

I suspect that both my HDD and SSD may be infected. Is it possible to take an image of the firmware? How do I go about doing it?
4
votes
1answer
202 views

Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?

Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through "interdiction" (interception) or via the internet. They are able to exfiltrate data and conduct surveillance ...
0
votes
1answer
572 views

Is it possible for the firmware of an SSD be infected by malware/malicious rootkits via the internet?

I am asking this because based on Snowden's relevations, bad actors "interdict" (intercept) shipments of routers, HDDs, SSDs, servers, etc., install malicious rootkits and spyware in the firmware and ...
3
votes
3answers
247 views

How to determine if a PC's hardware and firmware have been modified?

My company own some PCs and laptops. The firmware and hardware may have been modified. It is a waste to dispose of that many PCs and laptops. Are there any scans or anything I could do to determine ...
2
votes
1answer
136 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
2
votes
0answers
46 views

How to see the filesystem of a camera firmware?

I watched https://www.youtube.com/watch?v=B8DjTcANBx0 and in this video he downloads several camera firmwares and analyzes their files. As far as I know, the firmwares are binary files that you can ...
2
votes
1answer
244 views

Why download firmware from the internet when hacking CCTV cameras?

I saw a video about the hacking of CCTV cameras: He downloads the latest firmware from the internet. He uses some reverse engineering on it. He retrieves the password from etc/passwd file. And he ...
0
votes
1answer
287 views

Preventing firmware hacking with read only OS [closed]

Scenario 1: Attack from Internet, SD-card, USB-stick --> direct reflash BIOS firmware, without the operating system as an intermediate stage --> BIOS firmware or any other firmware which is stored ...
4
votes
2answers
348 views

Security of WWAN cards in laptops

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card ...
2
votes
3answers
229 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
4
votes
1answer
109 views

Is it possible to ensure that firmware doesn't keylog? [duplicate]

Not a conspiracy theory, just a thought experiment. Let's say some big smartphone manufacturer put keylogger (or any other malware) in their hardware. Would it be possible to reveal it with 100% ...
0
votes
1answer
59 views

Does SSH generate traffic when listening?

Does a service, for example, SSH, generate traffic when only listening (e.g. does it advertise itself in some way) when there is no connection established? I ask as on Android devices for example, we ...
1
vote
0answers
30 views

Question regarding the impact of additional PTS firmware version to P2PE application and P2PE solution

I have a question regarding the impact of additional PTS firmware version to P2PE application and P2PE solution. Is additional PTS approved firmware version subject to addition of POI device type? ...
0
votes
3answers
532 views

How do headphones work? Do they contain firmware? [closed]

How do headphones work? Do they contain any firmware or any instruction set? Are they vulnerable to anything? Good old wired analog Jack ones, not USB wired, wireless, Bluetooth which have lot of ...
16
votes
2answers
7k views

Can BIOS malware be installed from OS?

Can an OS vulnerability be exploited to install BIOS/UEFI/firmware malware (such as a keylogger)? I know BIOS is a "deeper" level than the OS. I know firmware based keyloggers exist. I know they can ...
4
votes
1answer
508 views

Does ATA security support or allow for 2FA?

I understand TCG OPAL is the spiritual successor of ATA Security for hard drive encryption with SEDs. They claim there is support for biometrics etc, but how is it for the predecessor, ATA Security? ...
3
votes
1answer
382 views

Is microcode physically able to mitigate Meltdown?

I am aware that there is no microcode fix for Meltdown available (it has already been answered in various questions), and that the only extant microcode patches (IBRS and IPBP) only help with one of ...
0
votes
1answer
329 views

Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks

Is that tool enough to mitigate/protect againts IntelME vulnerability? https://downloadcenter.intel.com/download/26755?v=t If it's not enough I more I can do to protect againts IntelME attacks ?
-2
votes
2answers
783 views

What are the best practices to implement secured remote firmware updates over-the-air (OTA)?

Firmware over the air (FOTA) is a general name for performing firmware updates remotely. Assume I have a microcontroller with RW memory and a boot loader. What's the right way to do firmware ...
1
vote
0answers
142 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
2
votes
2answers
567 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
5
votes
2answers
1k views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
6
votes
1answer
381 views

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

Several of the latest Intel Management Engine vulnerabilities are listed as local vulnerabilities, allowing code executing on the system to elevate its privileges to ME context. One of them (CVE-2017-...
5
votes
0answers
226 views

Security of TPM 1.2 for providing tamper-evidence against firmware modification

I would like to use a TPM for providing tamper-evidence to my workstation, using SRTM (Static Root-of-Trust for Measurement). Currently, I plan to have the TPM seal a one-time value which only I know, ...
3
votes
2answers
896 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
0
votes
1answer
161 views

How does someone check for malware in his machine's firmware? [closed]

We've all probably heard of firmware rootkits and other malware by now. But how do you check if your firmware is infected? And if you have been infected, how do you get rid of it?
14
votes
1answer
5k views

How can anyone access Intel's “backdoor OS”, MINIX?

I've read that all recent Intel-based machines include a secret MINIX-based OS, and that it even includes its own web-server. How does one access this OS's services from the main OS? Its purpose ...
2
votes
2answers
3k views

Are there USB flash drives with read-only firmware?

A security risk with ordinary flash drives is that they have re-writable (flashble) firmware, which basically lets a hacker replace the operating system of the USB drive with their own. Are there any ...
8
votes
1answer
140 views

Is it possible to determine router firmware version as a Wi-Fi client?

Let's say that I'm connected to some random Wi-Fi network and from that point I want to check the version of currently installed firmware, but let's exclude possibility of logging in with default ...