Collaborate Disseminate
I’ve just read about this:
https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/
Asides from the question in the title, I’d also like to add the following question:
Is it possib… Continue reading Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?
I’ve just read about this:
https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/
Asides from the question in the title, I’d also like to add the following question:
Is it possib… Continue reading Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?
I want to discuss the following scenario:
I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let’s assume there are two VMs running, mine and attacker’s … Continue reading What are some attacks to consider in a cloud deployment?
I am trying to understand how secure a VM based execution context isolation will be. So lets say, I instantiate a VM on a device and run the intended service in there. Assume that the attacker has physical access to the machi… Continue reading What are some practical attacks against VMs?
I mean if it possible to safely plug a PCMCIA card into a PC without IOMMU? Such computers are very widespread, every digital TV or receiver has a CI+ slot, which is PCMCIA, and people insert there cards they don’t control and which they h… Continue reading Are IDE DMA attacks possible and is it possible to prevent them purely with software means without any IOMMU or other special hardware
If you’re already familiar with PCI behavior and Linux’s handling of DMA buffers, skip to the third section for my actual question. Otherwise read on for a small summary of how PCI devices perform memory accesses, and how the kernel handle… Continue reading DMA attacks despite IOMMU isolation
what does IOMMU actually do, does it manage memory access for devices like MMU does for processes or is it more simplified thing and doesn’t provide virtualization/access control ?
So basically my question is: does IOMMU mit… Continue reading Does IOMMU prevent DMA attacks?
And of course, any other possible attack that involves convincing the target to plug in a modified thunderbolt device into their MacBook
I know that Thunderstrike works on MacBooks with firmware passwords as of early 2015, b… Continue reading Would using a firmware password protect a MacBook Pro from Thunderstrike?
Has Apple fixed the Thunderbolt DMA attack when the computer is unlocked or is it unfixable since DMA is built into Thunderbolt?
I don’t want to get hacked simply by plugging my Mac into a modified projector in a hotel or so… Continue reading Is Thunderbolt still insecure?
I read on the Wikipedia article on DMA attacks that a misconfigured BIOS allowed for this type of attacks. I am asking whether, given the hardware I am using, DMA attacks are possible and whether I can mitigate them by changing options in … Continue reading Preventing DMA Attacks