Re:CPU Backdoors
by crucini on Thursday February 05, 2015 @02:48PM
(#9005488)
Sounds convincing.
I'm not clear on the "million tricks" though. Suppose you embed some machine language in a string javascript, and use your r1/r2 trick - how can you compute the address of the machine language you want to execute?
Or are you saying there are existing chunks of machine language in the OS or apps that would be useful to remote execute, with no arguments?
I'm not clear on the "million tricks" though. Suppose you embed some machine language in a string javascript, and use your r1/r2 trick - how can you compute the address of the machine language you want to execute?
Or are you saying there are existing chunks of machine language in the OS or apps that would be useful to remote execute, with no arguments?