My current vulnerability bingo card suggests we’re heading for “these are real vulnerabilities that we’d respect in any other venue, hyped way beyond their impact”.
Show this thread
-
Pity that they would. It is just another boring vulnerability which fills the speaker list.
Nothing in this paper matters until the attacker has already won so hard it's game over. Not something I'm too interested in, but maybe DFIR people are?
-
-
no showers were harmed in the discovery of these "vulnerabilities"
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Once you have control of the secure processor can you “pull up the ladder” to keep control, or is it easy for someone else to use the same exploit (or even a master signing key) to regain control?
-
If you rewrite the firmware update it is “easy”. For example on the old Broadcom NICs you could patch the firmware update so that it returned “success” allowing you to keep persistence. Obviously I have not seen the PSP code but you can probably assume “doable”.
-
This is perfect autonomous no-C&C ransomware ;)
-
It has been possible for a long time using several devices on a PC: NIC, GPU, hard-disk. This is just “closer” to the CPU.
-
Can you compromise those devices so nobody can take control? That’s beautiful!
-
I can only do (a small number of) NICs.
End of conversation
New conversation -
-
-
It's interesting to folks involved with hardware attestation too, but it's pretty low in excitement value due to how nebulous the whole thing is.
-
Well yes, it does make a bit of a mockery of the whole attestation if your signed driver allows modification to the PSP.
-
Indeed. I'm just waiting for people to chew the fat and come to a sensible conclusion about what is and isn't possible, what the requirements are, etc. I really don't have the energy to dismantle the hypetrain myself.
-
There again, the really interesting one is the outsourced chipset…
End of conversation
New conversation -
-
-
Indeed. With physical access or root access you have won unless you are really, really incompetent. What annoys me no end is that such "news" give honest and competent security experts a bad name.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.