This is a textbook case of confirmation bias. You are ignoring facts from experts as they are not the explanation you would like to hear. In combination with not making a single filesystem dump available anywhere it becomes impossible to reason with any of your analysis.
-
-
Replying to @AndreaBarisani @securelyfitz and
How many of your raspis have an mmc1? I can give you a file system dump but it won’t help much as the fun stuff is loaded into a ramdisk from inaccessible hidden partition and only the unmodified components are available to dump. Offline forensics won’t make much headway.
2 replies 0 retweets 0 likes -
Replying to @dragosr @AndreaBarisani and
All of them have mmc1, you idiot. The Raspberry Pi 3 B has built-in WiFi. *SDIO* WiFi. How do you think it connects to the SoC, magic pixie dust?pic.twitter.com/buAT7zvlIH
2 replies 0 retweets 1 like -
Seriously, you have *no excuse* for this stuff. The moment you saw "mmc1" you should've looked at sysfs to find out what that is used for, or the device tree to figure out how it's configured. This is just shoddy research. https://github.com/raspberrypi/linux/blob/rpi-4.14.y/arch/arm/boot/dts/bcm2837-rpi-3-b.dts …
1 reply 0 retweets 1 like -
Replying to @marcan42 @AndreaBarisani and
Don't care what it's used for there, as long as adversary has multiple control links in (probably multiple operators). Static thinking again. A few lines of code and dev will deploy other use in 15 minutes. Analysis needs to wait for control neutralization/isolation.
1 reply 0 retweets 0 likes -
Replying to @dragosr @AndreaBarisani and
You said "How many of your raspis have an mmc1?" and I explained to you how the answer is ALL OF THEM (of this model). Are you going to ever admit you confused something completely benign for an IOC, or just keep bullshitting forever?
1 reply 0 retweets 2 likes -
Replying to @marcan42 @AndreaBarisani and
Look at some raspi boot dmesgs and you will get what I'm talking about. I do that so often I can sometimes pick out lines that are wierd as it scrolls by even. Please stop being patronizing. Maybe these folks are already on your some of your computers. Would you know?
1 reply 0 retweets 0 likes -
Replying to @dragosr @AndreaBarisani and
I'm still waiting for a single piece of verifiable evidence that something is out of place. Where are these "weird" boot logs? Perhaps you should start considering that if everyone else can find a benign explanation for everything you point out, maybe the problem is in your head.
3 replies 0 retweets 2 likes -
Replying to @marcan42 @AndreaBarisani and
You seem to think my job is to convince you. My task's securing my computers. Ocasionally advice for others own good/public benefit. And pick big problems/threats for conferences so folks can work on. You think I'm crazy? Enjoy life in the Prepositioned Cyberasset Club.
1 reply 0 retweets 0 likes -
Replying to @dragosr @AndreaBarisani and
*My* job is security, and when stuff like BadBIOS makes headlines it's an embarrassment to my field. *You* have a delusional paranoia problem, and I'm trying to help you because otherwise you'll convince other, less clueful people of your nonsense and it'll spiral out of control.
3 replies 0 retweets 4 likes
If you refuse to take the advice of your peers and get some help, that's unfortunste, but up to you. But in that case, I'd ask you to stop tweeting about this stuff, because you're hurting other people by spreading misinformation.
-
-
Replying to @marcan42 @AndreaBarisani and
What you don't seem to get, incident response, strategically, not always the best to play all cards face up. Even if someone is having a tantrum and calling you names. Been doing this long enough, comfortable with what I can, can't analyze, when wrong, I'll say. Not infallible.
1 reply 0 retweets 0 likes -
Replying to @dragosr @AndreaBarisani and
You *think* you're being rational, but you *aren't*. Seriously, Dragos, for your own sake, yet some progressional help. I can call out all the ways you're wrong on Twitter, but I can't help you with your issues. You need a professional for that.
1 reply 0 retweets 1 like - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.