Comment on Energizer battery charger contains backdoorparentComments−wendroid16yman dma−masomenos16y $ man dma No manual entry for dma−wendroid16yhttp://en.wikipedia.org/wiki/Direct_memory_accessAnd the description of how to exploit ithttp://www.schneier.com/blog/archives/2006/06/hacking_comput...The FireWire version http://www.storm.net.nz/static/files/ab_firewire_rux2k6-fina...−wendroid16yget a better manual−jey16yEr, DMA isn't controlled by the TLB using the usual page table for access permissions? If not, PCs are ridiculously broken.−wendroid16yYou can read write system memory at addresses that fit in 32bits even when the Kernel has crashed.
Comments
man dma
http://en.wikipedia.org/wiki/Direct_memory_access
And the description of how to exploit it
http://www.schneier.com/blog/archives/2006/06/hacking_comput...
The FireWire version http://www.storm.net.nz/static/files/ab_firewire_rux2k6-fina...
get a better manual
Er, DMA isn't controlled by the TLB using the usual page table for access permissions? If not, PCs are ridiculously broken.
You can read write system memory at addresses that fit in 32bits even when the Kernel has crashed.