Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times

From	edevils <use_replyto_address@devils.com>
Newsgroups	alt.comp.freeware, alt.comp.os.windows-10, alt.hacker, alt.privacy.anon-server, comp.os.linux.advocacy
Subject	Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times
Date	2015-12-22 11:49 +0100
Organization	A noiseless patient Spider
Message-ID	<n5b9m8$m7o$1@dont-email.me> (permalink)
References	(2 earlier) <9Ladnf3UP6furOXLnZ2dnUU7-QednZ2d@earthlink.com> <n59cua$j92$1@dont-email.me> <n59elc$p3l$1@dont-email.me> <n59fqv$v81$1@dont-email.me> <n5a4ne$ip9$1@dont-email.me>

Cross-posted to 5 groups.

Show all headers | View raw

On 12/22/2015 1:18 AM, Peter Köhlmann wrote:
> edevils wrote:
>
>> On 21/12/2015 19:01, Peter Köhlmann wrote:
>>> edevils wrote:
>>>
>>>> On 21/12/2015 18:06, Big Bad Bob wrote:
>>>>> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
>>>>>> Anonymous wrote this copyrighted missive and expects royalties:
>>>>>>
>>>>>>> Though most of you likely don't run Linuxspecifically, one
>>>>>>> using the Grub2 bootloaderyou'll surely appreciate the
>>>>>>> unintended humor of a brand-new exploit that was recently found
>>>>>>> for said bootloader.
>>>>>>>
>>>>>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
>>>>>>
>>>>>> What took you so long to post this?  It's been bandied about
>>>>>> for many days now.
>>>>>>
>>>>>> Already fixed, by the way.
>>>>>>
>>>>>> Pretty stupid bug, though.  Should never have happened.
>>>>>>
>>>>>
>>>>> with physical access to the machine, there's nothing stopping anyone
>>>>> from removing the hard drive, plugging in a USB hard drive adaptor
>>>>> thingy, and then reading it directly with another computer.
>>>>>
>>>>> so the bug is funnier than it is dangerous.
>>>>
>>>> Unless data is encrypted. If you remove the hard drive and plug it
>>>> somewhere, you are still left with ciphered data.
>>>>
>>>> On the contrary, if you read Hector Marco and Ismael Ripoll's original
>>>> article, you'll find out how they used the GRUB2 vulnerability to access
>>>> the GRUB rescue shell and deploy a malware from there.
>>>>
>>>> "Since the data is ciphered, the strategy we will use is to infect the
>>>> system and wait until the user decrypts the data (by login into the
>>>> system) and then access to the information in plain."
>>>>
>>>> http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
>>>
>>> With physical access to the machine they could just as well install the
>>> logging software the standard way.
>>
>> Could they, if GRUB is password protected?
>>
>
> Yes


1. USB and DVD etc. access would locked be in BIOS settings, of course.
2. Are you talking of keyboard access, or using hammer and screwdriver? 
That wouldn't go unnoticed.

Thread

Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <anonymous@hoi-polloi.org> - 2015-12-20 21:28 +0100
  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Shadow <Sh@dow.br> - 2015-12-20 18:58 -0200
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Mark Warner <mhwarner.inhibitions@gmail.com> - 2015-12-20 16:48 -0500
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times gheston@hiwaay.net (Gary Heston) - 2015-12-21 19:03 -0600
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:27 -0800
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 05:53 +0100
  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-20 19:38 -0500
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-21 09:06 -0800
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 18:32 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-21 19:01 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 19:21 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times ray carter <ray@zianet.com> - 2015-12-21 21:28 +0000
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:55 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <nobody@remailer.paranoici.org> - 2015-12-23 04:22 +0000
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-22 01:18 +0100
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:49 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 13:01 -0800
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:34 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Jack Ryan <noreply@remailer.cpunk.us> - 2015-12-25 19:13 -0500
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-22 08:17 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Fritz Wuehler <fritz@spamexpire-201512.rodent.frell.theremailer.net> - 2015-12-22 12:07 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:29 -0800
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:35 +0100
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 04:03 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28  Times Euclides Zoto <euclides_zoto@optimum.net> - 2015-12-28 20:48 -0800
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:32 +0100
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:33 +0100

csiph-web