a real life example of SR ICE? |
a real life example of SR ICE? |
Dec 10 2010, 08:24 PM
Post
#26
|
|
Target Group: Members Posts: 20 Joined: 12-November 10 Member No.: 19,168 |
Making a modern reasonably-secure computer kill itself with network input is about as likely as making a reasonably-sane human kill themselves with purely visual input.
That is to say, it's not strictly impossible, but it's extremely difficult and requires intimate knowledge of the system (or person) being attacked. |
|
|
Dec 10 2010, 08:31 PM
Post
#27
|
|
The ShadowComedian Group: Dumpshocked Posts: 14,538 Joined: 3-October 07 From: Hamburg, AGS Member No.: 13,525 |
Hah!
There's still software that can potentially kill computers even today . . Seeing how Fan-Control is mostly software based today, you just have to make the software think that the temperature is not as high as it really is. So now the fan does, maybe, 10% of the work it should do. And your CPU/GPU heats up to 150° Celsius and it's gone like the wind . . Other example would be todays software overclocking stuff . . just tell it to crank it up to 11 and watch the hardware fry. More famous examples are firmwarebugs in certain HDD's for example. It may not be too expensive, it may not be too hard to fix . . But damn it if it does not hurt when all of a sudden you lose about 2TB of Data . . Furthermore, there were certain HDD's where the software that controlled the read/write arm was buggy and could be used to destroy the HDD. Because if you sent it a certain set of instructions, then the arm would move in such a way that the entire HDD became unstable. Basically, it's using the resonance of the thing kinda . . repeat often enough, and the HDD starts to move in ways that are unhealthy for HDD's. Untill the 5400/7200/10000rpm spinning disks hit something that does NOT move . . SPRACK and the HDD is done for . . or screech if the head just hits the platter and scratches it up good. There were other HDD's, where the head crash could be caused by software too. Today, there are SSD's which from time to time need firmware upgrades . . if one such upgrade were to be hacked, you could build a backdoor straigt into the device. Or you could make it so that the firmware can not be flashed anymore and garbles up all data that has nothing to do with the running of the OS . . And i am curious to see what the EFI which is supposed to replace BIOS can be used for . . |
|
|
Dec 10 2010, 08:32 PM
Post
#28
|
|
Moving Target Group: Members Posts: 268 Joined: 3-December 10 From: Connecticut Member No.: 19,202 |
Well with the current versatility offered by "virtualized machines" this is unlikely to work. If the server you are targeting with your software is nonexistent there's no hardware to fry. VMs are incredibly handy due to the ease of maintenance, lower downtime, ease of backing up, and the ability to pool resources and distribute them as needed, I dont think this type of thing would ever catch on even if it was/is feasible.
|
|
|
Dec 10 2010, 09:31 PM
Post
#29
|
|
Great Dragon Group: Dumpshocked Posts: 5,087 Joined: 3-October 09 From: Kohle, Stahl und Bier Member No.: 17,709 |
Hah! There's still software that can potentially kill computers even today . . Seeing how Fan-Control is mostly software based today, you just have to make the software think that the temperature is not as high as it really is. So now the fan does, maybe, 10% of the work it should do. And your CPU/GPU heats up to 150° Celsius and it's gone like the wind . . Other example would be todays software overclocking stuff . . just tell it to crank it up to 11 and watch the hardware fry. As said earlier, modern processors will just throttle or shut down if they get too hot. Nothing you should do for weeks, but the immediate effect will at best be a reboot. QUOTE And i am curious to see what the EFI which is supposed to replace BIOS can be used for . . UEFI drivers also just interact with functions provided by device vendor. Additionally, EFI even has a mechanism for authenticating drivers...it's not used much and certainly not foolproof (drivers are authenticated before loading. But like everything else, the authentication mechanism is a driver...you get the idea (IMG:style_emoticons/default/wink.gif) ), but at least it exists. |
|
|
Dec 10 2010, 11:08 PM
Post
#30
|
|
Immortal Elf Group: Members Posts: 10,289 Joined: 2-October 08 Member No.: 16,392 |
Making a modern reasonably-secure computer kill itself with network input is about as likely as making a reasonably-sane human kill themselves with purely visual input. That is to say, it's not strictly impossible, but it's extremely difficult and requires intimate knowledge of the system (or person) being attacked. I take it you've read BLIT. |
|
|
Dec 10 2010, 11:48 PM
Post
#31
|
|
Creating a god with his own hands Group: Members Posts: 1,405 Joined: 30-September 02 From: 0:0:0:0:0:0:0:1 Member No.: 3,364 |
|
|
|
Dec 11 2010, 12:09 AM
Post
#32
|
|
The ShadowComedian Group: Dumpshocked Posts: 14,538 Joined: 3-October 07 From: Hamburg, AGS Member No.: 13,525 |
I don't know, the article in the OP kinda made me want to. Have you seen the one about the woman claiming ownership of the sun yet? |
|
|
Dec 11 2010, 12:32 AM
Post
#33
|
|
Immortal Elf Group: Members Posts: 10,289 Joined: 2-October 08 Member No.: 16,392 |
Have you seen the one about the woman claiming ownership of the sun yet? Well there is a guy who has a legitimate claim to a good 40 square km of the moon, IIRC. He purchased a lost Russian lunar rover, which was (about a year ago) found. I forget the law/rule that was invoked, but it was along the lines of "A man may claim land that is not belonging to any country and which he has tilled the soil." Noting that the lunar soil was tilled (or put to use) by the rover's wheels. |
|
|
Dec 11 2010, 12:41 AM
Post
#34
|
|
The ShadowComedian Group: Dumpshocked Posts: 14,538 Joined: 3-October 07 From: Hamburg, AGS Member No.: 13,525 |
Yeah, that's a way to get around certain limitations. And the moon, at least, has had and can have visitors again and again . .
But, if you read the whole article, she wants to make people pay for using her sun . . |
|
|
Dec 11 2010, 12:54 AM
Post
#35
|
|
Immortal Elf Group: Members Posts: 10,289 Joined: 2-October 08 Member No.: 16,392 |
Yeah, that's a way to get around certain limitations. And the moon, at least, has had and can have visitors again and again . . But, if you read the whole article, she wants to make people pay for using her sun . . I did read that (I made my post before the article even loaded) which I think is hilarious. |
|
|
Dec 14 2010, 05:06 PM
Post
#36
|
|
Moving Target Group: Members Posts: 433 Joined: 8-November 07 Member No.: 14,097 |
I'm not using her sun, her sun is beaming light onto my property. I should sue her for harrassment, if she can't control her own stellar processes.
|
|
|
Dec 14 2010, 05:09 PM
Post
#37
|
|
Immortal Elf Group: Members Posts: 10,289 Joined: 2-October 08 Member No.: 16,392 |
|
|
|
Dec 14 2010, 05:24 PM
Post
#38
|
|
Manus Celer Dei Group: Dumpshocked Posts: 17,008 Joined: 30-December 02 From: Boston Member No.: 3,802 |
Never mind the wrongful death suits from the estates of a significant fraction of skin cancer deaths.
~J |
|
|
Dec 15 2010, 04:28 AM
Post
#39
|
|
Moving Target Group: Members Posts: 366 Joined: 10-November 08 Member No.: 16,576 |
Making a modern reasonably-secure computer kill itself with network input is about as likely as making a reasonably-sane human kill themselves with purely visual input. Plan 9 from Outer Space, although I guess that's not purely visual input, the script would have to be an input as well. |
|
|
Lo-Fi Version | Time is now: 18th January 2025 - 04:29 AM |
Topps, Inc has sole ownership of the names, logo, artwork, marks, photographs, sounds, audio, video and/or any proprietary material used in connection with the game Shadowrun. Topps, Inc has granted permission to the Dumpshock Forums to use such names, logos, artwork, marks and/or any proprietary materials for promotional and informational purposes on its website but does not endorse, and is not affiliated with the Dumpshock Forums in any official capacity whatsoever.