Malware Could Use SSD Over-Provisioning to Bypass Security Measures

Re:Malware Could Use SSD Over-Provisioning to Bypass Securit... by mtmail on Thursday December 30, 2021 @07:48PM (#29743533)

What makes the technique or approach useless?

[ Parent | on HN ]

Re:Malware Could Use SSD Over-Provisioning to Bypass Securit... by Diggsey on Thursday December 30, 2021 @08:02PM (#29743637)

The fact that to execute the malware you need to be able to see it. If there's something that's visible whose job is to execute the payload hidden in the SSD, then that's the part that could be detected by AV software.

That said, it might still be a useful technique just for storing data in a hard to detect way.

[ Parent | on HN ]