New answers tagged

2

uuid.getnode() in python returns the MAC address of one of the network interfaces installed - if there are none, it returns a random 48-bit number with the eight bit set to none as per RFC 4122. That's as likely as good as you'll get. The UUID of the computer doesn't exist but often certain pieces of hardware have unique identifiers such as the CPU and any ...


4

Negative rings are false rings. They are not actual privilege levels of the CPU. The way rings work is simple. Some instructions have privilege checks where they verify that the current privilege level, or CPL, is sufficient and if it is not, the instruction fails with a general protection fault. CPL0 is ring 0, CPL1 is ring 1, etc. Some instructions will ...


1

I will stay with the intel/x86 architecture for my answer, but it can probably be applied to other vendors/ring-designs. Ring -3 is 'the computer that runs your computer', the management engine on the mainboard. So the next logical step would be to look for a chip on the motherboard that could exercise total control over the system. The only thing I can ...


1

Quoting directly from the IME firwmare update notes, if the attacker does not have physical access to the plaform to do a firmware flash, then they cannot do anything if the recommended flash descriptor write protections have been enabled. If they haven't, then the attackers needs ring 0 access to the kernel, where an attacker can exploit the ...


3

Recently I had been reading the papers published at the NDSSS 2019, and this paper presented in February I think answers the question completely. At the time the question was asked, it seems like the answer to there being vulnerabilities was yes but they have been fixed in the Linux kernel from 5.0. Slides belonging to the paper presented at the Network ...


0

A mere thought. While the banking app, and the way it communicates with the bank's servers, might be technically sound, and virtually unhackable; what about the phone itself? My major concern is about the security of the phone itself. If it gets stolen, or lost, then all a finder/thief needs to do is get around the lock screen. Many people use unlock ...


Top 50 recent answers are included