« first day (3046 days earlier)      last day (1826 days later) » 

forest
forest
12:36 AM
@jdgregson Yes.
And the malware wouldn't even need to use Thunderbolt if it's connected via PCIe, since PCIe supports DMA natively. Just write to the SSD firmware, which is as easy as using the native DOWNLOAD_MICROCODE ATA command that even hdparm supports.
This of course assumes that the IOMMU is unconfigured or improperly configured.
Whether or not that is the case depends on your operating system (Linux does not isolate by default unless you set intel_iommu=on as a boot parameter, whereas Windows does kinda-sorta enable the IOMMU but not very securely), and the quality of the DMAR tables supplied by your BIOS vendor.
 
 
4 hours later…
Nathan Merrill
Nathan Merrill
5:03 AM
How can I trust the hardware of a newly-shipped laptop? I know that I can't be 100% sure here, and I'm not really worried about a targeted attack, but is anybody actually looking at consumer-grade hardware to find backdoors?
 
 
4 hours later…
forest
forest
9:31 AM
@NathanMerrill People aren't looking specifically to find backdoors, but people are certainly studying and investigating consumer hardware.
And if you're not worried about a targeted attack, you generally are fine.
Just don't use the pre-installed OS and instead install a fresh copy.
oh boy this is not the floor
Tweeted by pooch on April 16, 2019 at 10:36 AM
lol
 
daya
daya
10:16 AM
@forest hahaha
 
 
5 hours later…
Rory Alsop
Rory Alsop
3:29 PM
@J.J and @forest - the two solutions: download all the things now (like the old days) or use a VPN. The gov will not have protected or children at all, just given some companies a licence to make money
 

« first day (3046 days earlier)      last day (1826 days later) »