Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firmware]

The tag has no usage guidance.

0
votes
1answer
84 views

What can a compromised firmware (UEFI) do after the hard-disk has been wiped?

I might be mistaken, but it seems the firmware (UEFI) needs to load some stuff from the disk to be able to do anything really interesting, like loading some advanced tools or loading the OS. Yet ...
0
votes
1answer
60 views

Does secure boot protects against firmware rootkits and GPT bootkits?

This question is related but only partialy answers my question. I know firmware (most notably UEFI firmware) rootkits or bootkits are rare and possiblity to introduce one into system is very low, but ...
0
votes
0answers
77 views

Could this be a sign of firmware infection?

I am burning an iso onto a CD using CD burning software. Before burning I take the 512sum of the image. After burning, I extract the image off the CD and check the sum again to make sure, and I get an ...
98
votes
9answers
19k views

Buying a “Used” Router

I am buying a "new" router from an open-box sale at a company that liquidates eCommerce returns. Plan to use it for a home network at cottage. I'm a bit nervous that it could have been modified by ...
0
votes
0answers
40 views

There are cached icons and screenshots from another person, am I hacked? [duplicate]

I'm running Ubuntu bionic 16.04 LTS and there are being constantly added new files into the ~/.cache/gnome-software/ directory. I've uploaded all of them into this new GitLab repository, so that you ...
1
vote
1answer
88 views

100% detectable backdoor attacks on network

Every article I have read on backdoor attack prevention says pretty much this: Protecting against them may be difficult. I am tired of reading how it can be ~difficult~ to protect against. ...
2
votes
1answer
100 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
0
votes
1answer
249 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
0
votes
1answer
125 views

How can you reset a UEFI completely in case of a firmware infection?

I haven't really understood whether firmware level infection (on either motherboard or drives) can actually be a thing without physical access, however how can one factory reset the firmware in that ...
6
votes
2answers
188 views

Is it possible to take an image of the firmware of HDD and SSD?

I suspect that both my HDD and SSD may be infected. Is it possible to take an image of the firmware? How do I go about doing it?
4
votes
1answer
149 views

Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?

Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through "interdiction" (interception) or via the internet. They are able to exfiltrate data and conduct surveillance ...
0
votes
1answer
191 views

Is it possible for the firmware of an SSD be infected by malware/malicious rootkits via the internet?

I am asking this because based on Snowden's relevations, bad actors "interdict" (intercept) shipments of routers, HDDs, SSDs, servers, etc., install malicious rootkits and spyware in the firmware and ...
0
votes
2answers
126 views

PC hardware and firmware modified?

My company own some PCs and laptops. The firmware and hardware may have been modified. The adversary is a hacker who works for a mid sized company. It is not a three letter agency or the government. ...
2
votes
1answer
83 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
2
votes
0answers
42 views

How to see the filesystem of a camera firmware?

I watched https://www.youtube.com/watch?v=B8DjTcANBx0 and in this video he downloads several camera firmwares and analyzes their files. As far as I know, the firmwares are binary files that you can ...
2
votes
1answer
187 views

Why download firmware from the internet when hacking CCTV cameras?

I saw a video about the hacking of CCTV cameras: He downloads the latest firmware from the internet. He uses some reverse engineering on it. He retrieves the password from etc/passwd file. And he ...
0
votes
1answer
165 views

Preventing firmware hacking with read only OS [closed]

Scenario 1: Attack from Internet, SD-card, USB-stick --> direct reflash BIOS firmware, without the operating system as an intermediate stage --> BIOS firmware or any other firmware which is stored ...
4
votes
2answers
220 views

Security of WWAN cards in laptops

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card ...
2
votes
3answers
187 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
4
votes
1answer
105 views

Is it possible to ensure that firmware doesn't keylog? [duplicate]

Not a conspiracy theory, just a thought experiment. Let's say some big smartphone manufacturer put keylogger (or any other malware) in their hardware. Would it be possible to reveal it with 100% ...
0
votes
1answer
47 views

Does SSH generate traffic when listening?

Does a service, for example, SSH, generate traffic when only listening (e.g. does it advertise itself in some way) when there is no connection established? I ask as on Android devices for example, we ...
1
vote
0answers
30 views

Question regarding the impact of additional PTS firmware version to P2PE application and P2PE solution

I have a question regarding the impact of additional PTS firmware version to P2PE application and P2PE solution. Is additional PTS approved firmware version subject to addition of POI device type? ...
0
votes
3answers
342 views

How do headphones work? Do they contain firmware? [closed]

How do headphones work? Do they contain any firmware or any instruction set? Are they vulnerable to anything? Good old wired analog Jack ones, not USB wired, wireless, Bluetooth which have lot of ...
11
votes
2answers
4k views

Can BIOS malware be installed from OS?

Can an OS vulnerability be exploited to install BIOS/UEFI/firmware malware (such as a keylogger)? I know BIOS is a "deeper" level than the OS. I know firmware based keyloggers exist. I know they can ...
4
votes
1answer
410 views

Does ATA security support or allow for 2FA?

I understand TCG OPAL is the spiritual successor of ATA Security for hard drive encryption with SEDs. They claim there is support for biometrics etc, but how is it for the predecessor, ATA Security? ...
3
votes
1answer
312 views

Is microcode physically able to mitigate Meltdown?

I am aware that there is no microcode fix for Meltdown available (it has already been answered in various questions), and that the only extant microcode patches (IBRS and IPBP) only help with one of ...
0
votes
1answer
246 views

Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks

Is that tool enough to mitigate/protect againts IntelME vulnerability? https://downloadcenter.intel.com/download/26755?v=t If it's not enough I more I can do to protect againts IntelME attacks ?
1
vote
0answers
128 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
2
votes
2answers
458 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
5
votes
2answers
900 views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
6
votes
0answers
334 views

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

Several of the latest Intel Management Engine vulnerabilities are listed as local vulnerabilities, allowing code executing on the system to elevate its privileges to ME context. One of them (CVE-2017-...
4
votes
0answers
167 views

Security of TPM 1.2 for providing tamper-evidence against firmware modification

I would like to use a TPM for providing tamper-evidence to my workstation, using SRTM (Static Root-of-Trust for Measurement). Currently, I plan to have the TPM seal a one-time value which only I know, ...
3
votes
2answers
715 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
0
votes
1answer
123 views

How does someone check for malware in his machine's firmware? [closed]

We've all probably heard of firmware rootkits and other malware by now. But how do you check if your firmware is infected? And if you have been infected, how do you get rid of it?
14
votes
1answer
4k views

How can anyone access Intel's “backdoor OS”, MINIX?

I've read that all recent Intel-based machines include a secret MINIX-based OS, and that it even includes its own web-server. How does one access this OS's services from the main OS? Its purpose ...
4
votes
2answers
2k views

Are there USB flash drives with read-only firmware?

A security risk with ordinary flash drives is that they have re-writable (flashble) firmware, which basically lets a hacker replace the operating system of the USB drive with their own. Are there any ...
8
votes
1answer
119 views

Is it possible to determine router firmware version as a Wi-Fi client?

Let's say that I'm connected to some random Wi-Fi network and from that point I want to check the version of currently installed firmware, but let's exclude possibility of logging in with default ...
6
votes
3answers
638 views

Knowing if a malware infected something else than the hdd or ssd

I saw a very interesting answer stating that something else than hdd or ssd can be infected : Can a computer virus be stored somewhere else than on the hard drive? It is very important for me to be ...
-3
votes
1answer
135 views

Is is possible that cheap wifi repeater contains malware? [closed]

There are lot of very cheap wifi repeater on ebay (example). Could it possible that it have malware pre-installed? Due to cheap production cost, the repeater must not have much computational ...
27
votes
8answers
6k views

Should firmware images for IoT be encrypted for security reasons?

When working with Internet of Things devices, is it recommend to obfuscate or encrypt firmware images pushed to clients? This to make reverse engineering harder. (They should be signed of course)
6
votes
1answer
820 views

Is Intel i3 CPU affected by the Intel ME vulnerability?

Hello I have an Intel® Core™ i3-2328M CPU @ 2.20GHz computer processor (I think Sandy Bridge). https://ark.intel.com/products/70927/Intel-Core-i3-2328M-Processor-3M-Cache-2_20-GHz I have heard about ...
0
votes
2answers
1k views

Hardware / firmware backdoors : TPM as a security risk - How to turn it into security advantage?

--- Question: What are the exact risks of using TPM 2.0 or owning this integrated chip? In what circumstances? What are the solutions to minimize risks? Details: My primary goal was to try to find ...
1
vote
1answer
71 views

Monitor with two simultaneous, seperate inputs: can an OS read from both inputs? [closed]

For example, if you have two computers connected to one monitor, at the same time: can the visuals being sent from computer #1 to the monitor be received by computer #2 ? In any kind of simple way ? ...
2
votes
1answer
192 views

What should be the ideal course of action for a compromised GPU?

What should be the ideal course of action for a GPU that is suspected compromised, for example by a virtual machine using passthrough? Are there any ways to detect such an infection? If the computer'...
0
votes
1answer
348 views

How to detect, if ESP32 or ESP2866 IoT devices hide malicious in their firmware?

ESP32 and ESP2866 devices are very famous as cheap IoT controller and connect via wireless LAN. Unfortunately the firmware of these devices is still closed source and quite large. It is there any ...
0
votes
1answer
84 views

What are the known ways to gain complete access to hardware audio?

Are there any known ways to gain access to firmware (bios/EFI) and permanently change the audio in a way that would effect the quality (Clarity, Volume, Frequency Range, Dynamic Range). For instance ...
1
vote
0answers
60 views

Is my router not capable for WAN security

I am using Dlink Dir 600 L. Current Firmware Version :2.04 Current Firmware Date : Tue 15 Oct 2013 I checked Dlink's website and found no new firmware. I also tried DD-WRT and openwrt but cant ...
4
votes
1answer
212 views

Can I detect a firmware toolkit like NightSkies on my iPhone?

This article tells us that the NightSkies tool may have been put on iPhones enroute before distribution. While there have been many iPhones, architectures, and security updates since 2008, is there a ...
4
votes
1answer
161 views

How would you remove the malware from a router or switch?

With the recent release of vault 7 was just wondering if you were to purchase a piece of network equipment off of eBay (or anything else for that matter?) that the CIA installed malware onto, how ...
25
votes
4answers
4k views

Safe to download router firmware over unencrypted HTTP?

I went to download the latest firmware for my router and noticed the download link is not HTTPS, so I sent the following email to the manufacturer: I went to look for new firmware for my Archer C7 ...