BugTraq
RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 12:12PM
Larry Seltzer (Larry larryseltzer com) (3 replies)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 10 2008 06:50PM
FD (fd cms ac)
Re: Firewire Attack on Windows Vista Mar 09 2008 04:27PM
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)
Larry Seltzer wrote:

> I actually do have a response fom Microsoft on the broader issue, but it
> doesn't address these issues or even concded that there's necessarily
> anything they can do about it. They instead speak of the same
> precautions for physical access that they spoke of a couple weeks ago
> with respect to the "frozen notebook memory" attack - use drive
> encryption, use 2-factor authentication, use hibernate instead of sleep,
> use group policy to enforce them. I don't think it's a bad response
> under the circumstances.

WRT the DMA access over FireWire it's but a bad response since it doesn't
get the point!

1. Drive encryption won't help against reading the memory.

2. The typical user authentication won't help, we're at hardware level
here, and no OS needs to be involved.

3. The computer is up (and running; see above), no hibernate or sleep
is involved here.

4. Group policies can be circumvented, even by a limited user.
<http://blogs.technet.com/markrussinovich/archive/2005/12/12/circumventi
ng-group-policy-as-a-limited-user.aspx>

Stefan

[ reply ]
Re: Firewire Attack on Windows Vista Mar 11 2008 12:51AM
Steve Shockley (steve shockley shockley net) (1 replies)
Re: Firewire Attack on Windows Vista Mar 11 2008 10:55PM
Stefan Kanthak (stefan kanthak nexgo de)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 06:32PM
Tim (tim-security sentinelchicken org) (1 replies)
RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 10:03PM
Larry Seltzer (Larry larryseltzer com) (2 replies)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 09 2008 12:28AM
Jacob Appelbaum (jacob appelbaum net) (1 replies)
RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 10 2008 03:36AM
Larry Seltzer (Larry larryseltzer com) (1 replies)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 11 2008 03:56AM
Jacob Appelbaum (jacob appelbaum net)
Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 08 2008 10:51PM
Tim (tim-security sentinelchicken org)


 

Privacy Statement
Copyright 2010, SecurityFocus