News for hackers. Stuff that matters.

A comment on On Hacking MicroSD Cards. Parent comment

Re:On Hacking MicroSD Cards by midas007 on Sunday December 29, 2013 @11:59PM (#6983114)
Yeah, the pressure of NSA demanding access on anything resembling HSM is obvious. Anything that's not open source has the potential to hide undesired behavior.

Also, more fun would be "cryptolocker" disk-based malware. The aspects of capability exist elsewhere today as mentioned in the article and cryptolocker's $15 million USD and counting.

Also also: is there any HIDS yet for checksumming various chipset/peripheral firmwares?

[ Parent | on HN ]
Re:On Hacking MicroSD Cards by rdl on Monday December 30, 2013 @02:10AM (#6983489)
I'm doing a talk on an open hw design/open source HSM at ShmooCon in a month or so, which seems like the only viable way to deal with this threat.

TCG (TPM, TXT, ...) Measured boot sort of includes firmware checksumming. It's often turned off.

[ Parent | on HN ]