Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times

From	Fritz Wuehler <fritz@spamexpire-201512.rodent.frell.theremailer.net>
References	<00dd6abc25b969876d21fe49a96b28f9@hoi-polloi.org> <n57hjv$pjo$1@dont-email.me> <9Ladnf3UP6furOXLnZ2dnUU7-QednZ2d@earthlink.com> <n59cua$j92$1@dont-email.me> <n59elc$p3l$1@dont-email.me>
Subject	Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times
Message-ID	<c8e170c8fbd2e6649bca84921618f098@msgid.frell.theremailer.net> (permalink)
Date	2015-12-22 12:07 +0100
Newsgroups	alt.comp.freeware, alt.comp.os.windows-10, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy
Organization	dizum.com - The Internet Problem Provider

Cross-posted to 5 groups.

Show all headers | View raw

In article <n59elc$p3l$1@dont-email.me>
Peter =?UTF-8?B?S8O2aGxtYW5u?= <peter-koehlmann@t-online.de> 
wrote:
>
> edevils wrote:
>
> > On 21/12/2015 18:06, Big Bad Bob wrote:
> >> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
> >>> Anonymous wrote this copyrighted missive and expects royalties:
> >>>
> >>>> Though most of you likely don't run Linuxspecifically, one
> >>>> using the Grub2 bootloaderyou'll surely appreciate the
> >>>> unintended humor of a brand-new exploit that was recently found
> >>>> for said bootloader.
> >>>>
> >>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
> >>>
> >>> What took you so long to post this?  It's been bandied about
> >>> for many days now.
> >>>
> >>> Already fixed, by the way.
> >>>
> >>> Pretty stupid bug, though.  Should never have happened.
> >>>
> >>
> >> with physical access to the machine, there's nothing stopping anyone
> >> from removing the hard drive, plugging in a USB hard drive adaptor
> >> thingy, and then reading it directly with another computer.
> >>
> >> so the bug is funnier than it is dangerous.
> >
> > Unless data is encrypted. If you remove the hard drive and plug it
> > somewhere, you are still left with ciphered data.
> >
> > On the contrary, if you read Hector Marco and Ismael Ripoll's original
> > article, you'll find out how they used the GRUB2 vulnerability to access
> > the GRUB rescue shell and deploy a malware from there.
> >
> > "Since the data is ciphered, the strategy we will use is to infect the
> > system and wait until the user decrypts the data (by login into the
> > system) and then access to the information in plain."
> >
> > http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
>
> With physical access to the machine they could just as well install the
> logging software the standard way. No need for a Grub exploit
>
> Physical access means all bounds are off. You can not secure such a system
> in any meaningful way, encrypted or not

Bottom line, someone would have to have be present with access 
to the equipment to accomplish this correct?

That would narrow down the scope of possible suspects 
considerably.

Thread

Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <anonymous@hoi-polloi.org> - 2015-12-20 21:28 +0100
  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Shadow <Sh@dow.br> - 2015-12-20 18:58 -0200
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Mark Warner <mhwarner.inhibitions@gmail.com> - 2015-12-20 16:48 -0500
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times gheston@hiwaay.net (Gary Heston) - 2015-12-21 19:03 -0600
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:27 -0800
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 05:53 +0100
  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-20 19:38 -0500
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-21 09:06 -0800
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 18:32 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-21 19:01 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 19:21 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times ray carter <ray@zianet.com> - 2015-12-21 21:28 +0000
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:55 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <nobody@remailer.paranoici.org> - 2015-12-23 04:22 +0000
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-22 01:18 +0100
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:49 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 13:01 -0800
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:34 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Jack Ryan <noreply@remailer.cpunk.us> - 2015-12-25 19:13 -0500
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-22 08:17 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Fritz Wuehler <fritz@spamexpire-201512.rodent.frell.theremailer.net> - 2015-12-22 12:07 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:29 -0800
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:35 +0100
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 04:03 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28  Times Euclides Zoto <euclides_zoto@optimum.net> - 2015-12-28 20:48 -0800
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:32 +0100
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:33 +0100

csiph-web