Comment on Energizer battery charger contains backdoorparentComments−jey16yIf your OS allows that, you need a better OS. Seriously, that's practically like having an OS that lets anyone on your LAN just SSH into your machine as root without a password just because they happen to be on the same subnet.−wendroid16yman dma−masomenos16y $ man dma No manual entry for dma−wendroid16yhttp://en.wikipedia.org/wiki/Direct_memory_accessAnd the description of how to exploit ithttp://www.schneier.com/blog/archives/2006/06/hacking_comput...The FireWire version http://www.storm.net.nz/static/files/ab_firewire_rux2k6-fina...−wendroid16yget a better manual−jey16yEr, DMA isn't controlled by the TLB using the usual page table for access permissions? If not, PCs are ridiculously broken.−wendroid16yYou can read write system memory at addresses that fit in 32bits even when the Kernel has crashed.
Comments
If your OS allows that, you need a better OS. Seriously, that's practically like having an OS that lets anyone on your LAN just SSH into your machine as root without a password just because they happen to be on the same subnet.
man dma
http://en.wikipedia.org/wiki/Direct_memory_access
And the description of how to exploit it
http://www.schneier.com/blog/archives/2006/06/hacking_comput...
The FireWire version http://www.storm.net.nz/static/files/ab_firewire_rux2k6-fina...
get a better manual
Er, DMA isn't controlled by the TLB using the usual page table for access permissions? If not, PCs are ridiculously broken.
You can read write system memory at addresses that fit in 32bits even when the Kernel has crashed.