Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #183462

Re: Installing Debian on an android device

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Jul 09, 2017 at 05:00:26PM +0200, deloptes wrote:

[...]

> As for some conspiracy chips with embedded rom .... if you have basic
> engineering knowledge you could easily identify all of it and to my
> knowledge it is not trivial to embed such a chip into a mass product,
> especially a mobile phone.

If you want some fascinating reading, see [1] [2]: a researcher from
Google's Zero Day project found out bugs in the firmware of a widespread
Broadcomm SoC (used in many well-known smartphones). Specifically some
buffer overflows in the WiFi subsystem (a processor on its own, with
its own firmware, but sharing the main processor's RAM, it seems).

He could produce a proof-of-concept exploit in which prepared WiFi
packets could first take over the WiFi processor, then from there the
main processor. No user interaction needed: just the WiFi has to be
listening.

No need for the bad guys to shoehorn a spy processor on your machine.
There are enough already in there (Intel's ME, disk controllers, what
not) with enough vulnerabilities ready to do the NSA's bidding (or FSB,
or whoever is your favourite enemy these days).

Cheers, indeed :-)

[1] https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html
[2] https://googleprojectzero.blogspot.de/2017/04/over-air-exploiting-broadcoms-wi-fi_11.html
- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlliTzYACgkQBcgs9XrR2kYb9wCbBSmZr1cZHcrC0abG34LjDcvr
qcQAn0LeCfpNuRNsAiBW2JckR/i6bws/
=6oWQ
-----END PGP SIGNATURE-----

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Installing Debian on an android device Fungi4All <fungilife@protonmail.com> - 2017-07-05 02:00 +0200
  Re: Installing Debian on an android device Joel Rees <joel.rees@gmail.com> - 2017-07-05 06:30 +0200
    Re: Installing Debian on an android device Fungi4All <fungilife@protonmail.com> - 2017-07-06 07:20 +0200
      Re: Installing Debian on an android device Joel Rees <joel.rees@gmail.com> - 2017-07-08 03:40 +0200
        Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-08 09:10 +0200
          Re: Installing Debian on an android device Joe <joe@jretrading.com> - 2017-07-08 10:00 +0200
            Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-08 13:40 +0200
            Re: Installing Debian on an android device Fungi4All <fungilife@protonmail.com> - 2017-07-08 22:00 +0200
              Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-09 07:40 +0200
                Re: Installing Debian on an android device Fungi4All <fungilife@protonmail.com> - 2017-07-09 11:20 +0200
                Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-09 12:30 +0200
                Re: Installing Debian on an android device Fungi4All <fungilife@protonmail.com> - 2017-07-09 13:00 +0200
                Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-09 17:10 +0200
                Re: Installing Debian on an android device <tomas@tuxteam.de> - 2017-07-09 17:50 +0200
                Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-09 22:50 +0200
                Re: Installing Debian on an android device <tomas@tuxteam.de> - 2017-07-09 23:20 +0200
                Re: Installing Debian on an android device deloptes <deloptes@gmail.com> - 2017-07-10 06:30 +0200
                Re: Installing Debian on an android device Joel Rees <joel.rees@gmail.com> - 2017-07-10 01:50 +0200

csiph-web