IPB

Welcome Guest ( Log In | Register )

2 Pages V  < 1 2  
Reply to this topicStart new topic
> a real life example of SR ICE?
TeslaNick
post Dec 10 2010, 08:24 PM
Post #26


Target
*

Group: Members
Posts: 20
Joined: 12-November 10
Member No.: 19,168



Making a modern reasonably-secure computer kill itself with network input is about as likely as making a reasonably-sane human kill themselves with purely visual input.

That is to say, it's not strictly impossible, but it's extremely difficult and requires intimate knowledge of the system (or person) being attacked.

Go to the top of the page
 
+Quote Post
Stahlseele
post Dec 10 2010, 08:31 PM
Post #27


The ShadowComedian
**********

Group: Dumpshocked
Posts: 14,538
Joined: 3-October 07
From: Hamburg, AGS
Member No.: 13,525



Hah!
There's still software that can potentially kill computers even today . .
Seeing how Fan-Control is mostly software based today, you just have to make the software think that the temperature is not as high as it really is.
So now the fan does, maybe, 10% of the work it should do. And your CPU/GPU heats up to 150° Celsius and it's gone like the wind . .
Other example would be todays software overclocking stuff . . just tell it to crank it up to 11 and watch the hardware fry.
More famous examples are firmwarebugs in certain HDD's for example. It may not be too expensive, it may not be too hard to fix . .
But damn it if it does not hurt when all of a sudden you lose about 2TB of Data . .
Furthermore, there were certain HDD's where the software that controlled the read/write arm was buggy and could be used to destroy the HDD.
Because if you sent it a certain set of instructions, then the arm would move in such a way that the entire HDD became unstable.
Basically, it's using the resonance of the thing kinda . . repeat often enough, and the HDD starts to move in ways that are unhealthy for HDD's.
Untill the 5400/7200/10000rpm spinning disks hit something that does NOT move . . SPRACK and the HDD is done for . . or screech if the head just hits the platter and scratches it up good.
There were other HDD's, where the head crash could be caused by software too.
Today, there are SSD's which from time to time need firmware upgrades . . if one such upgrade were to be hacked, you could build a backdoor straigt into the device.
Or you could make it so that the firmware can not be flashed anymore and garbles up all data that has nothing to do with the running of the OS . .
And i am curious to see what the EFI which is supposed to replace BIOS can be used for . .
Go to the top of the page
 
+Quote Post
Ramaloke
post Dec 10 2010, 08:32 PM
Post #28


Moving Target
**

Group: Members
Posts: 268
Joined: 3-December 10
From: Connecticut
Member No.: 19,202



Well with the current versatility offered by "virtualized machines" this is unlikely to work. If the server you are targeting with your software is nonexistent there's no hardware to fry. VMs are incredibly handy due to the ease of maintenance, lower downtime, ease of backing up, and the ability to pool resources and distribute them as needed, I dont think this type of thing would ever catch on even if it was/is feasible.
Go to the top of the page
 
+Quote Post
Sengir
post Dec 10 2010, 09:31 PM
Post #29


Great Dragon
*********

Group: Dumpshocked
Posts: 5,087
Joined: 3-October 09
From: Kohle, Stahl und Bier
Member No.: 17,709



QUOTE (Stahlseele @ Dec 10 2010, 09:31 PM) *
Hah!
There's still software that can potentially kill computers even today . .
Seeing how Fan-Control is mostly software based today, you just have to make the software think that the temperature is not as high as it really is.
So now the fan does, maybe, 10% of the work it should do. And your CPU/GPU heats up to 150° Celsius and it's gone like the wind . .
Other example would be todays software overclocking stuff . . just tell it to crank it up to 11 and watch the hardware fry.

As said earlier, modern processors will just throttle or shut down if they get too hot. Nothing you should do for weeks, but the immediate effect will at best be a reboot.

QUOTE
And i am curious to see what the EFI which is supposed to replace BIOS can be used for . .

UEFI drivers also just interact with functions provided by device vendor. Additionally, EFI even has a mechanism for authenticating drivers...it's not used much and certainly not foolproof (drivers are authenticated before loading. But like everything else, the authentication mechanism is a driver...you get the idea (IMG:style_emoticons/default/wink.gif) ), but at least it exists.
Go to the top of the page
 
+Quote Post
Draco18s
post Dec 10 2010, 11:08 PM
Post #30


Immortal Elf
**********

Group: Members
Posts: 10,289
Joined: 2-October 08
Member No.: 16,392



QUOTE (TeslaNick @ Dec 10 2010, 03:24 PM) *
Making a modern reasonably-secure computer kill itself with network input is about as likely as making a reasonably-sane human kill themselves with purely visual input.

That is to say, it's not strictly impossible, but it's extremely difficult and requires intimate knowledge of the system (or person) being attacked.


I take it you've read BLIT.
Go to the top of the page
 
+Quote Post
Fix-it
post Dec 10 2010, 11:48 PM
Post #31


Creating a god with his own hands
***

Group: Members
Posts: 1,405
Joined: 30-September 02
From: 0:0:0:0:0:0:0:1
Member No.: 3,364



QUOTE (TeslaNick @ Dec 10 2010, 02:24 PM) *
about as likely as making a reasonably-sane human kill themselves with purely visual input.


I don't know, the article in the OP kinda made me want to.
Go to the top of the page
 
+Quote Post
Stahlseele
post Dec 11 2010, 12:09 AM
Post #32


The ShadowComedian
**********

Group: Dumpshocked
Posts: 14,538
Joined: 3-October 07
From: Hamburg, AGS
Member No.: 13,525



QUOTE (Fix-it @ Dec 11 2010, 12:48 AM) *
I don't know, the article in the OP kinda made me want to.

Have you seen the one about the woman claiming ownership of the sun yet?
Go to the top of the page
 
+Quote Post
Draco18s
post Dec 11 2010, 12:32 AM
Post #33


Immortal Elf
**********

Group: Members
Posts: 10,289
Joined: 2-October 08
Member No.: 16,392



QUOTE (Stahlseele @ Dec 10 2010, 07:09 PM) *
Have you seen the one about the woman claiming ownership of the sun yet?


Well there is a guy who has a legitimate claim to a good 40 square km of the moon, IIRC.

He purchased a lost Russian lunar rover, which was (about a year ago) found. I forget the law/rule that was invoked, but it was along the lines of "A man may claim land that is not belonging to any country and which he has tilled the soil." Noting that the lunar soil was tilled (or put to use) by the rover's wheels.
Go to the top of the page
 
+Quote Post
Stahlseele
post Dec 11 2010, 12:41 AM
Post #34


The ShadowComedian
**********

Group: Dumpshocked
Posts: 14,538
Joined: 3-October 07
From: Hamburg, AGS
Member No.: 13,525



Yeah, that's a way to get around certain limitations. And the moon, at least, has had and can have visitors again and again . .
But, if you read the whole article, she wants to make people pay for using her sun . .
Go to the top of the page
 
+Quote Post
Draco18s
post Dec 11 2010, 12:54 AM
Post #35


Immortal Elf
**********

Group: Members
Posts: 10,289
Joined: 2-October 08
Member No.: 16,392



QUOTE (Stahlseele @ Dec 10 2010, 07:41 PM) *
Yeah, that's a way to get around certain limitations. And the moon, at least, has had and can have visitors again and again . .
But, if you read the whole article, she wants to make people pay for using her sun . .


I did read that (I made my post before the article even loaded) which I think is hilarious.
Go to the top of the page
 
+Quote Post
Sponge
post Dec 14 2010, 05:06 PM
Post #36


Moving Target
**

Group: Members
Posts: 433
Joined: 8-November 07
Member No.: 14,097



I'm not using her sun, her sun is beaming light onto my property. I should sue her for harrassment, if she can't control her own stellar processes.
Go to the top of the page
 
+Quote Post
Draco18s
post Dec 14 2010, 05:09 PM
Post #37


Immortal Elf
**********

Group: Members
Posts: 10,289
Joined: 2-October 08
Member No.: 16,392



QUOTE (Sponge @ Dec 14 2010, 12:06 PM) *
I'm not using her sun, her sun is beaming light onto my property. I should sue her for harrassment, if she can't control her own stellar processes.


Doo Eet.

Also, she's not paying taxes on all of the acreage she owns (roughly 1,504,377,562,400,000 acres).
Go to the top of the page
 
+Quote Post
Kagetenshi
post Dec 14 2010, 05:24 PM
Post #38


Manus Celer Dei
**********

Group: Dumpshocked
Posts: 17,008
Joined: 30-December 02
From: Boston
Member No.: 3,802



Never mind the wrongful death suits from the estates of a significant fraction of skin cancer deaths.

~J
Go to the top of the page
 
+Quote Post
nylanfs
post Dec 15 2010, 04:28 AM
Post #39


Moving Target
**

Group: Members
Posts: 366
Joined: 10-November 08
Member No.: 16,576



QUOTE (TeslaNick @ Dec 10 2010, 03:24 PM) *
Making a modern reasonably-secure computer kill itself with network input is about as likely as making a reasonably-sane human kill themselves with purely visual input.



Plan 9 from Outer Space, although I guess that's not purely visual input, the script would have to be an input as well.
Go to the top of the page
 
+Quote Post

2 Pages V  < 1 2
Reply to this topicStart new topic

 



RSS Lo-Fi Version Time is now: 18th January 2025 - 04:29 AM

Topps, Inc has sole ownership of the names, logo, artwork, marks, photographs, sounds, audio, video and/or any proprietary material used in connection with the game Shadowrun. Topps, Inc has granted permission to the Dumpshock Forums to use such names, logos, artwork, marks and/or any proprietary materials for promotional and informational purposes on its website but does not endorse, and is not affiliated with the Dumpshock Forums in any official capacity whatsoever.