Bugtraq mailing list archives
Re: Firewire Attack on Windows Vista
From: Peter Watkins <peterw () usa net>
Date: Wed, 5 Mar 2008 19:37:45 -0500
On Wed, Mar 05, 2008 at 04:30:35PM -0500, Roger A. Grimes wrote:
As somewhat indicated in the paper itself, these types of physical DMA attacks are possible against any PC-based OS, not just Windows. If that's true, why is the paper titled around Windows Vista? I guess it makes headlines faster. But isn't as important, if not more important, to say all PC-based systems have the same underlying problem? That it's a broader problem needing a broader solution, instead of picking on one OS vendor to get headlines?
Roger, you should note that Adam's "Hit by a Bus" paper includes information about how Linux users can load their OS' Firewire driver in a way that should disallow physical memory DMA access, and close this attack vector. I have not yet seen anyone explain how to do the same in Windows. If there is no such option in Windows (as the Panholzer paper claims), then Microsoft deserves the negative attention.
[Disclaimer: I'm a full-time Microsoft employee.]
As for "broader solutions", Microsoft is in an excellent position to help improve the situation -- maybe you could shed some light on their efforts? -Peter
Current thread:
- Firewire Attack on Windows Vista Bernhard Mueller (Mar 05)
- Re: Firewire Attack on Windows Vista Thierry Zoller (Mar 05)
- RE: Firewire Attack on Windows Vista Roger A. Grimes (Mar 05)
- Re: Firewire Attack on Windows Vista Peter Watkins (Mar 06)
- RE: Firewire Attack on Windows Vista Larry Seltzer (Mar 06)
- Re: [Full-disclosure] Firewire Attack on Windows Vista Tim (Mar 07)
- RE: [Full-disclosure] Firewire Attack on Windows Vista Larry Seltzer (Mar 07)
- Re: [Full-disclosure] Firewire Attack on Windows Vista Tim (Mar 07)
- RE: [Full-disclosure] Firewire Attack on Windows Vista Larry Seltzer (Mar 07)
- Re: [Full-disclosure] Firewire Attack on Windows Vista Tim (Mar 07)
- Re: Firewire Attack on Windows Vista Peter Watkins (Mar 06)
- RE: [Full-disclosure] Firewire Attack on Windows Vista Thor (Hammer of God) (Mar 07)
- RE: [Full-disclosure] Firewire Attack on Windows Vista Thor (Hammer of God) (Mar 07)
- RE: [Full-disclosure] Firewire Attack on Windows Vista Larry Seltzer (Mar 07)
- RE: [Full-disclosure] Firewire Attack on Windows Vista Larry Seltzer (Mar 07)