News for hackers. Stuff that matters.

A comment on The BadBIOS Analysis is Wrong. Parent comment

Re:The BadBIOS Analysis is Wrong by saidajigumi on Friday November 01, 2013 @04:40PM (#6656249)
> belief that somehow everything must be implemented at that level

To make that concrete: I've known about commercial penetration test software[1] that uses multiple levels of agents, trading off footprint vs. capabilities, for over a decade. This is not even remotely a new idea.

[1] E.g. Core Impact from http://www.coresecurity.com/

[ Parent | on HN ]
Re:The BadBIOS Analysis is Wrong by lawnchair_larry on Friday November 01, 2013 @07:45PM (#6657342)
That is not an example of what the author is talking about. Core agents are not implemented at different levels in the system vs bios sense. Impact doesn't have anything at all similar to what badbios is claimed to be doing.
[ Parent | on HN ]