Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firmware]

The tag has no usage guidance.

0
votes
2answers
85 views

PC hardware and firmware modified?

My company own some PCs and laptops. The firmware and hardware may have been modified. The adversary is a hacker who works for a mid sized company. It is not a three letter agency or the government. ...
0
votes
0answers
27 views

Chipsec level of security

I compared two Chipsec result files and the values are the same, do you know of vulnerabilities that would not change those values?
2
votes
1answer
71 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
2
votes
0answers
34 views

How to see the filesystem of a camera firmware?

I watched https://www.youtube.com/watch?v=B8DjTcANBx0 and in this video he downloads several camera firmwares and analyzes their files. As far as I know, the firmwares are binary files that you can ...
0
votes
0answers
62 views

Is the exploit described in A Monitor Darkly applicable to laptops and smartphones/tablets?

In A Monitor Darkly, Ang Cui demonstrates an attack exploiting the monitor's firmware. In it, he describes a possible vector where a pixel displayed on a website he controls sends commands to the ...
2
votes
1answer
169 views

Why download firmware from the internet when hacking CCTV cameras?

I saw a video about the hacking of CCTV cameras: He downloads the latest firmware from the internet. He uses some reverse engineering on it. He retrieves the password from etc/passwd file. And he ...
0
votes
1answer
120 views

Preventing firmware hacking with read only OS [closed]

Scenario 1: Attack from Internet, SD-card, USB-stick --> direct reflash BIOS firmware, without the operating system as an intermediate stage --> BIOS firmware or any other firmware which is stored ...
0
votes
0answers
38 views

How can you prevent flashing of malicious firmware for USB (or SATA) hard drives?

I am assuming no physical access. Some devices have signed firmware so this makes it a bit harder though not impossible. Is there anything an end user can do to make it harder for an attacker? Maybe ...
4
votes
2answers
115 views

Security of WWAN cards in laptops

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card ...
2
votes
3answers
144 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
4
votes
1answer
103 views

Is it possible to ensure that firmware doesn't keylog? [duplicate]

Not a conspiracy theory, just a thought experiment. Let's say some big smartphone manufacturer put keylogger (or any other malware) in their hardware. Would it be possible to reveal it with 100% ...
0
votes
1answer
43 views

Does SSH generate traffic when listening?

Does a service, for example, SSH, generate traffic when only listening (e.g. does it advertise itself in some way) when there is no connection established? I ask as on Android devices for example, we ...
1
vote
0answers
22 views

Question regarding the impact of additional PTS firmware version to P2PE application and P2PE solution

I have a question regarding the impact of additional PTS firmware version to P2PE application and P2PE solution. Is additional PTS approved firmware version subject to addition of POI device type? ...
0
votes
3answers
276 views

How do headphones work? Do they contain firmware? [closed]

How do headphones work? Do they contain any firmware or any instruction set? Are they vulnerable to anything? Good old wired analog Jack ones, not USB wired, wireless, Bluetooth which have lot of ...
5
votes
2answers
2k views

Can BIOS malware be installed from OS?

Can an OS vulnerability be exploited to install BIOS/UEFI/firmware malware (such as a keylogger)? I know BIOS is a "deeper" level than the OS. I know firmware based keyloggers exist. I know they can ...
4
votes
1answer
269 views

Does ATA security support or allow for 2FA?

I understand TCG OPAL is the spiritual successor of ATA Security for hard drive encryption with SEDs. They claim there is support for biometrics etc, but how is it for the predecessor, ATA Security? ...
0
votes
1answer
251 views

Is microcode physically able to mitigate Meltdown?

I am aware that there is no microcode fix for Meltdown available (it has already been answered in various questions), and that the only extant microcode patches (IBRS and IPBP) only help with one of ...
0
votes
1answer
166 views

Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks

Is that tool enough to mitigate/protect againts IntelME vulnerability? https://downloadcenter.intel.com/download/26755?v=t If it's not enough I more I can do to protect againts IntelME attacks ?
0
votes
0answers
96 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
2
votes
2answers
349 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
4
votes
2answers
562 views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
5
votes
0answers
286 views

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

Several of the latest Intel Management Engine vulnerabilities are listed as local vulnerabilities, allowing code executing on the system to elevate its privileges to ME context. One of them (CVE-2017-...
4
votes
0answers
136 views

Security of TPM 1.2 for providing tamper-evidence against firmware modification

I would like to use a TPM for providing tamper-evidence to my workstation, using SRTM (Static Root-of-Trust for Measurement). Currently, I plan to have the TPM seal a one-time value which only I know, ...
3
votes
2answers
598 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
0
votes
1answer
100 views

How does someone check for malware in his machine's firmware? [closed]

We've all probably heard of firmware rootkits and other malware by now. But how do you check if your firmware is infected? And if you have been infected, how do you get rid of it?
14
votes
1answer
2k views

How can anyone access Intel's “backdoor OS”, MINIX?

I've read that all recent Intel-based machines include a secret MINIX-based OS, and that it even includes its own web-server. How does one access this OS's services from the main OS? Its purpose ...
4
votes
2answers
1k views

Are there USB flash drives with read-only firmware?

A security risk with ordinary flash drives is that they have re-writable (flashble) firmware, which basically lets a hacker replace the operating system of the USB drive with their own. Are there any ...
8
votes
1answer
115 views

Is it possible to determine router firmware version as a Wi-Fi client?

Let's say that I'm connected to some random Wi-Fi network and from that point I want to check the version of currently installed firmware, but let's exclude possibility of logging in with default ...
0
votes
0answers
37 views

Unpacked camera firmware filesystem contains strange CGI files

I used binwalk and uncramfs to extract the filesystem from the firmware of a Swedish made camera system. Strangely, most cgi files that I would be interested in from a vulnerability standpoint, seem ...
5
votes
3answers
477 views

Knowing if a malware infected something else than the hdd or ssd

I saw a very interesting answer stating that something else than hdd or ssd can be infected : Can a computer virus be stored somewhere else than on the hard drive? It is very important for me to be ...
-3
votes
1answer
120 views

Is is possible that cheap wifi repeater contains malware? [closed]

There are lot of very cheap wifi repeater on ebay (example). Could it possible that it have malware pre-installed? Due to cheap production cost, the repeater must not have much computational ...
27
votes
8answers
5k views

Should firmware images for IoT be encrypted for security reasons?

When working with Internet of Things devices, is it recommend to obfuscate or encrypt firmware images pushed to clients? This to make reverse engineering harder. (They should be signed of course)
6
votes
1answer
689 views

Is Intel i3 CPU affected by the Intel ME vulnerability?

Hello I have an Intel® Core™ i3-2328M CPU @ 2.20GHz computer processor (I think Sandy Bridge). https://ark.intel.com/products/70927/Intel-Core-i3-2328M-Processor-3M-Cache-2_20-GHz I have heard about ...
0
votes
2answers
790 views

Hardware / firmware backdoors : TPM as a security risk - How to turn it into security advantage?

--- Question: What are the exact risks of using TPM 2.0 or owning this integrated chip? In what circumstances? What are the solutions to minimize risks? Details: My primary goal was to try to find ...
1
vote
1answer
70 views

Monitor with two simultaneous, seperate inputs: can an OS read from both inputs? [closed]

For example, if you have two computers connected to one monitor, at the same time: can the visuals being sent from computer #1 to the monitor be received by computer #2 ? In any kind of simple way ? ...
2
votes
1answer
165 views

What should be the ideal course of action for a compromised GPU?

What should be the ideal course of action for a GPU that is suspected compromised, for example by a virtual machine using passthrough? Are there any ways to detect such an infection? If the computer'...
0
votes
1answer
291 views

How to detect, if ESP32 or ESP2866 IoT devices hide malicious in their firmware?

ESP32 and ESP2866 devices are very famous as cheap IoT controller and connect via wireless LAN. Unfortunately the firmware of these devices is still closed source and quite large. It is there any ...
0
votes
1answer
80 views

What are the known ways to gain complete access to hardware audio?

Are there any known ways to gain access to firmware (bios/EFI) and permanently change the audio in a way that would effect the quality (Clarity, Volume, Frequency Range, Dynamic Range). For instance ...
1
vote
0answers
57 views

Is my router not capable for WAN security

I am using Dlink Dir 600 L. Current Firmware Version :2.04 Current Firmware Date : Tue 15 Oct 2013 I checked Dlink's website and found no new firmware. I also tried DD-WRT and openwrt but cant ...
4
votes
1answer
206 views

Can I detect a firmware toolkit like NightSkies on my iPhone?

This article tells us that the NightSkies tool may have been put on iPhones enroute before distribution. While there have been many iPhones, architectures, and security updates since 2008, is there a ...
4
votes
1answer
156 views

How would you remove the malware from a router or switch?

With the recent release of vault 7 was just wondering if you were to purchase a piece of network equipment off of eBay (or anything else for that matter?) that the CIA installed malware onto, how ...
0
votes
0answers
115 views

How to setup a firmware level Android malware?

I want to install a firmware level malware on my own android device, so in case it gets stolen and wiped out I would still be able to retrieve it using information gathered by the malware. Do you have ...
24
votes
4answers
4k views

Safe to download router firmware over unencrypted HTTP?

I went to download the latest firmware for my router and noticed the download link is not HTTPS, so I sent the following email to the manufacturer: I went to look for new firmware for my Archer C7 ...
1
vote
3answers
4k views

Who and how can update cable modem firmware?

This might sound stupid question, but I need to know: can only my ISP update the firmware of my cable modem? Or can I do it? And if yes, should I? I have vague memory of once updating something using ...
1
vote
1answer
90 views

Is it preferable to wipe device first and then upgrade firmware, or vice versa?

*For the purposes of this post, Software OS Update == Firmware Upgrade. For instance when the device notifies you that there is a OS Software Update, this could also modify the firmware of the device. ...
1
vote
2answers
135 views

Persistent exploits on “baremetal” cloud hosting services

There are several cloud providers that offer "baremetal" hosting where tenants are allowed root-level access to the OS running directly on the hardware. What is the risk that a previous malicious ...
-1
votes
2answers
308 views

I have a very bizarre malware that I cannot seem to get rid of [closed]

Here is my horror story that I thought I would share to see if one had any great suggestions and maybe would be interested in researching my problem because it is very fascinating. If you are ...
1
vote
1answer
239 views

has there ever been router virus able to send SMS (text)

I am fighting with my network provider. If I have router with LTE GSM Card inside, is it possible for router malware to send text messages from it? Or has it ever been done? They say I subscribed to ...
0
votes
0answers
54 views

Securely identify a device with customized firmware

We're developing a device to securely identify users from the cloud. Among various security features or the device, we plan to let the user download and flash a customized firmware. We're concerned ...
1
vote
0answers
339 views

Encrypting OTA software updates files for embedded devices

I need to encrypt and send update files of the order of 100K from a server, through a mobile app, to low power wireless embedded devices (32 bit). The file transfers will be infrequent. The mobile ...