Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.freeware > #250745

Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times

From edevils <use_replyto_address@devils.com>
Newsgroups alt.comp.freeware, alt.comp.os.windows-10, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy
Subject Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times
Date 2015-12-21 19:21 +0100
Organization A noiseless patient Spider
Message-ID <n59fqv$v81$1@dont-email.me> (permalink)
References <00dd6abc25b969876d21fe49a96b28f9@hoi-polloi.org> <n57hjv$pjo$1@dont-email.me> <9Ladnf3UP6furOXLnZ2dnUU7-QednZ2d@earthlink.com> <n59cua$j92$1@dont-email.me> <n59elc$p3l$1@dont-email.me>

Cross-posted to 5 groups.

Show all headers | View raw

On 21/12/2015 19:01, Peter Köhlmann wrote:
> edevils wrote:
>
>> On 21/12/2015 18:06, Big Bad Bob wrote:
>>> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
>>>> Anonymous wrote this copyrighted missive and expects royalties:
>>>>
>>>>> Though most of you likely don't run Linux—specifically, one
>>>>> using the Grub2 bootloader—you'll surely appreciate the
>>>>> unintended humor of a brand-new exploit that was recently found
>>>>> for said bootloader.
>>>>>
>>>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
>>>>
>>>> What took you so long to post this?  It's been bandied about
>>>> for many days now.
>>>>
>>>> Already fixed, by the way.
>>>>
>>>> Pretty stupid bug, though.  Should never have happened.
>>>>
>>>
>>> with physical access to the machine, there's nothing stopping anyone
>>> from removing the hard drive, plugging in a USB hard drive adaptor
>>> thingy, and then reading it directly with another computer.
>>>
>>> so the bug is funnier than it is dangerous.
>>
>> Unless data is encrypted. If you remove the hard drive and plug it
>> somewhere, you are still left with ciphered data.
>>
>> On the contrary, if you read Hector Marco and Ismael Ripoll's original
>> article, you'll find out how they used the GRUB2 vulnerability to access
>> the GRUB rescue shell and deploy a malware from there.
>>
>> "Since the data is ciphered, the strategy we will use is to infect the
>> system and wait until the user decrypts the data (by login into the
>> system) and then access to the information in plain."
>>
>> http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
>
> With physical access to the machine they could just as well install the
> logging software the standard way.

Could they, if GRUB is password protected?


> No need for a Grub exploit
>
> Physical access means all bounds are off. You can not secure such a system
> in any meaningful way, encrypted or not

However, removing a hard drive is not as easy as using a keyboard. If 
you remove a hard drive in an office, you might be be noticed.
Some hard drives are even stored in a secure vault, while you can still 
access the keyboard.

Back to alt.comp.freeware | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <anonymous@hoi-polloi.org> - 2015-12-20 21:28 +0100
  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Shadow <Sh@dow.br> - 2015-12-20 18:58 -0200
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Mark Warner <mhwarner.inhibitions@gmail.com> - 2015-12-20 16:48 -0500
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times gheston@hiwaay.net (Gary Heston) - 2015-12-21 19:03 -0600
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:27 -0800
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 05:53 +0100
  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-20 19:38 -0500
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-21 09:06 -0800
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 18:32 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-21 19:01 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 19:21 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times ray carter <ray@zianet.com> - 2015-12-21 21:28 +0000
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:55 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <nobody@remailer.paranoici.org> - 2015-12-23 04:22 +0000
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-22 01:18 +0100
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:49 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 13:01 -0800
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:34 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Jack Ryan <noreply@remailer.cpunk.us> - 2015-12-25 19:13 -0500
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-22 08:17 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Fritz Wuehler <fritz@spamexpire-201512.rodent.frell.theremailer.net> - 2015-12-22 12:07 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:29 -0800
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:35 +0100
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 04:03 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28  Times Euclides Zoto <euclides_zoto@optimum.net> - 2015-12-28 20:48 -0800
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:32 +0100
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:33 +0100

csiph-web