News for hackers. Stuff that matters.

A comment on How to verify boot firmware integrity if you prioritize neutralizing Intel ME?.

Re:How to verify boot firmware integrity if you prioritize n... by AshamedCaptain on Wednesday August 28, 2024 @06:51AM (#41378127)
> Another idea is a container for the computer. The container can of course be destroyed easily but then you will at least know they did something with the computer. But you would need a container that the evil maid can't go get a duplicate of or have one manufactured so they can replace the container after destroying original one.

What's the goal here? Why can't the same super-powered evil maid just create a visually-identical replica of your entire computer, login UI included, then MITM your password / unlock sequence ?

Then go through your original computer at their leisure with the captured password, while you ponder why "your" computer just crashed after login...

[ Parent | on HN ]
Re:How to verify boot firmware integrity if you prioritize n... by PrimaryAlibi on Friday August 30, 2024 @10:37AM (#41401178)
If we have a container that is tamper evident then they can't do all those computer modifications you mentioned without we finding out the computer has been tampered with.
[ Parent | on HN ]
Re:How to verify boot firmware integrity if you prioritize n... by AshamedCaptain on Saturday August 31, 2024 @09:54AM (#41408882)
It's not a modification, it's a clone. Does your container allow operating the computer (even when locked)? Because operating the computer is all that I need to be able to make a visually identical replica right until the logon screen.
[ Parent | on HN ]
Re:How to verify boot firmware integrity if you prioritize n... by PrimaryAlibi on Thursday September 05, 2024 @06:18AM (#41455235)
Maybe I misunderstand you what you mean with a clone of the computer. Do you mean take my entire computer and replace it with a completely different computer that is the same model? Because if that is what you mean then they can't clone the tamper evident container because then it wouldn't be tamper evident. Glitter nail polish for example couldn't be cloned because the pattern would be different on the second computer which is the clone.

Or do you mean to do everything on my computer without having access to any hardware/firmware? You would just simply boot up the computer and somehow hack it? How?

[ Parent | on HN ]