New answers tagged

0

In general, yes it is possible. Even if it is not possible with firmware, they could attach a device inside to the same affect. If you're in a critical position in your company, go with new products that will be supported by the vendor in the next few years at least. Otherwise, if this is personal, you'll just have to live with what you can afford. The risk ...


1

While I have never looked into the hardware aspect of things, I am assuming that some docking stations - if not most - actually behave as a USB hub, thus they should be able to carry out BadUSB attacks, among others. OTOH reprogramming the firmware may not be that easy. But you could add an implant rather try to reprogram the whole thing. Shouldn't be too ...


1

As always: do a risk analysis. What is the likelihood that that a docking station contains a keylogger? According to @multithr3at3d: it is almost zero. There are easier ways of distributing keyloggers than selling docking stations. You might look at the vendor. Is it a reputable vendor (good shop, good rep on ebay, things like that) or is it a shady man ...


0

Absolutely. dm-verity operates at a higher level than firmware, so as long as the malware does not show its true colors, dm-verity will do nothing. Such a malware could only operate (apart from destroying the data on its storage) by supplying different data than it is stored. For example, upon activation, malicious code would be "read" from the ...


Top 50 recent answers are included