Attacking full-disk encryption with Inception
Attacking full-disk encryption with Inception
Posted Jan 11, 2013 19:30 UTC (Fri) by dlang (guest, #313)In reply to: Attacking full-disk encryption with Inception by intgr
Parent article: Attacking full-disk encryption with Inception
As I understand it, all the other devices have the device driver/controller card setup and start the DMA
With Firewire, the device sets up and starts the DMA
so the exploit DMA on other devices, you need to hack the firmware of the controller card to have it do something other than what the device driver expects it to.
But with Firewire, you only need to hack the firmware of the device you are plugging in (and since you can completely control that device, this is rather easy)
In terms of risk, Firewire is more like exposing the PCI bus for external things to plug into.