NordVPN confirms it was hacked

Re:NordVPN confirms it was hacked by woadwarrior01 on Monday October 21, 2019 @07:10PM (#21318600)

Full Disk Encryption is an option, but that’ll entail needing the use the IPMI console to enter the password at every reboot, essentially turning it into a manual operation.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by mirimir on Tuesday October 22, 2019 @02:16PM (#21326915)

One can do LUKS with access via dropbear in initramfs.

If you're lucky during network install, you'll never need out of bound access.

But rebooting is still a manual process.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by kadoban on Monday October 21, 2019 @09:40PM (#21319564)

If you have physical access twice, full disk encryption usually doesn't help really at all. IPMI seems about as powerful as physical access.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by FDSGSG on Tuesday October 22, 2019 @04:03AM (#21321276)

If you just ignore random reboots, sure. But why would you?

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by kadoban on Tuesday October 22, 2019 @03:43PM (#21327760)

I don't think that'd be necessary, couldn't you make changes and then wait for natural reboots?

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by FDSGSG on Wednesday October 23, 2019 @12:59PM (#21336563)

You couldn't, not via console access anyway.

However, if the attacker gains RCE many IPMI implementations theoretically allow for DMA, but this is a significantly more complex attack to mount in practice with no public PoCs available.

[ Parent | on HN ]