News for hackers. Stuff that matters.

A comment on NordVPN confirms it was hacked. Parent comment

Re:NordVPN confirms it was hacked by kadoban on Monday October 21, 2019 @09:40PM (#21319564)
If you have physical access twice, full disk encryption usually doesn't help really at all. IPMI seems about as powerful as physical access.
[ Parent | on HN ]
Re:NordVPN confirms it was hacked by FDSGSG on Tuesday October 22, 2019 @04:03AM (#21321276)
If you just ignore random reboots, sure. But why would you?
[ Parent | on HN ]
Re:NordVPN confirms it was hacked by kadoban on Tuesday October 22, 2019 @03:43PM (#21327760)
I don't think that'd be necessary, couldn't you make changes and then wait for natural reboots?
[ Parent | on HN ]
Re:NordVPN confirms it was hacked by FDSGSG on Wednesday October 23, 2019 @12:59PM (#21336563)
You couldn't, not via console access anyway.

However, if the attacker gains RCE many IPMI implementations theoretically allow for DMA, but this is a significantly more complex attack to mount in practice with no public PoCs available.

[ Parent | on HN ]