>if you can force the target to e.g. boot from a malicious USB device. If you ca... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

edmccard on June 5, 2015 | parent | context | favorite | on: An X86 Design Flaw Allowing Universal Privilege Es...

>if you can force the target to e.g. boot from a malicious USB device.

If you can control the boot media, aren't you already past the point where you need further exploits to control the machine?

exDM69 on June 5, 2015 [–]

Yes - but that's a bit besides the point. The situation is a lot worse if you can remain undetected after tampering with the boot media or firmware. This can be a lot more damaging than a ring-0 exploit.

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact