Hector Martin

If you open your computer's case, it is already vulnerable to hacking, because no consumer x86 computer is secure under that threat model. Yes, this is another bullshit hyped attack with minimal practical consequence because under their threat model you are already pwned.https://twitter.com/WIRED/status/1259669698494509056 …

If your attack relies on soldering wires to a flash chip and/or getting root access to the computer, you are hereby banned from the news media.

I described from the top of the piece exactly what's required for the attack. (Which doesn't include soldering, by the way) It's a new, invasive, physical access hacking technique, no more, no less.

Here we go again. Do you know what a threat model is? Do you realize there are approximately two dozen other ways you could completely compromise a laptop after opening the case like that? Does it make sense then that the headline is total clickbait?

Yep, I do know what a threat model is! And described exactly what's necessary to carry out the attack in the piece, so users can judge for themselves if they should be scared. If there are 24 other previously known unpatchable ways to do this attack, that is actually news to me.

If you want to own a computer by opening the case, all you need to do is flash the BIOS chip. Or the firmware chip of any device with DMA access. Or any internal device with no DMA access but a buggy driver (i.e. most). Or just hijack a bus like LPC. The list goes on.