BugTraq
RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 12:12PM
Larry Seltzer (Larry larryseltzer com) (3 replies)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 10 2008 06:50PM
FD (fd cms ac)
Re: Firewire Attack on Windows Vista Mar 09 2008 04:27PM
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)
Re: Firewire Attack on Windows Vista Mar 11 2008 12:51AM
Steve Shockley (steve shockley shockley net) (1 replies)
Re: Firewire Attack on Windows Vista Mar 11 2008 10:55PM
Stefan Kanthak (stefan kanthak nexgo de)
Steve Shockley wrote:

> Stefan Kanthak wrote:
>> 2. The typical user authentication won't help, we're at hardware
>> level here, and no OS needs to be involved.
>
> So, if I understand you correctly, if I boot my machine into DOS the
> memory can be read over Firewire?

If DMA is enabled on the firewire interface its possible!

If the BIOS allows to boot from a firewire device then it will setup
the hardware!

> Or does the machine need a Firewire driver loaded to be vulnerable?

If the BIOS does not setup the firewire interface the some driver has
to do it. So: it depends.

You can also read the memory if you shut down but dont power off your
system. Typically drivers leave their devices in working condition.

Stefan

[ reply ]
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 06:32PM
Tim (tim-security sentinelchicken org) (1 replies)
RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 10:03PM
Larry Seltzer (Larry larryseltzer com) (2 replies)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 09 2008 12:28AM
Jacob Appelbaum (jacob appelbaum net) (1 replies)
RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 10 2008 03:36AM
Larry Seltzer (Larry larryseltzer com) (1 replies)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 11 2008 03:56AM
Jacob Appelbaum (jacob appelbaum net)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 10:51PM
Tim (tim-security sentinelchicken org)


 

Privacy Statement
Copyright 2010, SecurityFocus