Firmware flaw threatens routers, phones

Firmware flaw threatens routers, phones
Robert Lemos, 2007-04-19

Firmware flaw threatens routers, phones 2007-04-20
Jamie

I have some experience of the ARM, and I'm not really sure what is being said here. My best guess is that proprietary software has plenty of bugs, and some of them are exploitable on the ARM where as they wouldn't be exploitable in equivalent code on an Intel PC.

Still, I can't see how a null ptr...

[ more ] [ reply ]

This is more than 1 year old. 2007-04-21
Anonymous (2 replies)

Look at blackhat eur. This presentation was demoed there more than a year ago.

what is the point of bringing it to attention again?...

[ more ] [ reply ]

Re: This is more than 1 year old. 2007-04-23
Anonymous

Largely because the same speakers are always recybled at these talks ie: cult of personality wins vice anything actually useful being presented to the community as a whole....

[ more ] [ reply ]

Re: This is more than 1 year old. 2007-04-24
Anonymous (2 replies)

This was a different presentation, if you could read you'd see that this was pushing a new attack class, exploitable NULL pointer flaws. For a community that is supposedly smart, the majority of the people in it are stupid. ...

[ more ] [ reply ]

Re: Re: This is more than 1 year old. 2007-04-25
Anonymous

Most people in the security field are stupid? Or is that the .01% of exploit developers are that far advanced? It would be nice to see material presented at these con's that is actually useful by the average security practicioner, vice the latest Symbian malware...who cares! Give me something useful...

[ more ] [ reply ]

Re: Re: This is more than 1 year old. 2007-04-25
Anonymous

There are people who are 'in' the community then there are people who 'live in' the community. (un?)fortunately I live there. This is a great article and if it were published in a Euro Blackhat convention, it's good to bring important news back to the headlines for obvious reasons....

[ more ] [ reply ]

Firmware flaw threatens routers, phones 2007-04-23
Anonymous

I saw the cansec presentation, and it was not the same as the presentation from blackhat.

The attack class that was released were exploitable NULL pointers on ARM/XScale. They are exploitable due to the vector table being mapped at the 0 address.

The presentation was great, as was the techniq...

[ more ] [ reply ]

Firmware flaw threatens routers, phones 2007-04-26
Anonymous

The average security practicioner is smarter than 99% of all other people, especially the idiot talking crap....

[ more ] [ reply ]