Slashdot Mirror


Researchers Demo BIOS Attack That Survives Disk Wipes

suraj.sun writes "A pair of Argentinian researchers have found a way to perform a BIOS level malware attack capable of surviving even a hard-disk wipe. Alfredo Ortega and Anibal Sacco from Core Security Technologies — used the stage at last week's CanSecWest conference to demonstrate methods (PDF) for infecting the BIOS with persistent code that will survive reboots and re-flashing attempts. The technique includes patching the BIOS with a small bit of code that gave them complete control of the machine. The demo ran smoothly on a Windows machine, a PC running OpenBSD and another running VMware Player."

15 of 396 comments (clear)

  1. Tsarkon Reports Obama bent on bankrupting USA by Anonymous Coward · · Score: -1, Offtopic

    Tsarkon Reports Obama bent on bankrupting USA

    Barack is hell bent on bankrupting the USA once and for all ; read everything below and you might finallybegin to understand.

    - Chairman Barack Hussein "The Teleprompter" Obama is deeply connected to corruption, Rahm Emanuel (Radical authoritarian Statist-Zionist whose father was part of the Murderous Civilian Killing Israeli Terrorist Organization known as IRGUN), Connected to Rod Blagojevich (Rahm inherited Rod's federal-congress seat), Connected to Ayers, a man who promotes the concept that civilian collateral damage is ok in a war against freedom, Preacher Jeremiah Wright, who is himself a black-elitist who wants all the people who largely "pay the freight" to suffer, 31 million on food stamps, more blacks are in prison and on food-stamps per capita than anyone else. The problem with Wright is simply this: the facts are "racist."
    - Obama: Racist, AIPAC-Zionist, Corrupted and a Traitor and a Liar who can't even produce a valid birth certificate (which is not a certificate of live birth)
    - Raytheon lobbyist in Pentagon
    - Goldman Sachs insider second in command at Treasury.
    - Cabinet has had several nominees and appointees with multiple tax fraud issues.
    - The head of the IRS and the head of the Treasury, Geithner, is a Tax Cheat
    - Lied about no lobbyists
    - Lied about having a new degree of accountability and a SUNSHINE period of new laws, he has signed bills with little or no review at whitehouse.gov as promised.
    - Appointed a second amendment violating Rich-pardoning treasonist Eric Holder as AG, the top cop of the USA, a man who helped a fugitive evade justice.
    - Has not put a dime in for a single new nuclear power plant but wants to help bridges and roads to promote more driving.
    - Obama, Blagojevich and Rahm Emanuel have a LOT to hide. They literally lived next to each other, Rahm had (until being Chairman Obama's Chief of staff) Blagojevich's old federal congressional seat. Blagojevich helped Chairman "The Teleprompter" Obama cheat his way to the Illinois senate by getting other candidates thrown off the ballot in Illinois. Why do you think Blagojevich was so mad? Obama DID owe him, big time. Rahm and Obama are using Blagojevich and trying to cut his head off to keep him away.
    - Tony Rezko, Iraqi Arms Dealer Nahdmi Auchi, and of course Aiham Alsammarae. Chairman "The Teleprompter" Hussein Obama is so corrupted its a joke.
    - Fools and "useful idiots" twist the pie charts by leaving welfare, workfare, interest on debt, social security, Medicare and Medicaid out and focusing only on non-whole "discretionary" pie charts.
    2007 high level pie chart, Federal Budget, USA
    2009 Pie chart, detailed, Federal Budget, USA
    - Chairman Obama is drastically increasing spending and creating more entitlements that will make the US less competitive (especially against China, India, East Europe/Russia). This will be a huge disaster and change you can believe in will strap you and your grandkids with more debt. No taxation without representation? Obama is spending money for the next two-three generations and they can't even vote yet, or even have been born.
    - An alternative to the dollar and a forex and a reserve currency came up at the last G20 meeting. The world will not take faith in Obama's liar-socialist spending and welfare state, why should the taxpayers (plebian citizen-slaves of a police state).
    - The spending going on now vastly eclipses all previous spending. In fact, the massive trillion plus debts is a thing of the 80's onwards. Congress signs the checks, remember that Year after year, as egregious as the pentagon spending is, that the social spending is completely a waste of money and it is unfunded over the long term. Eisenhower built the interstates, the US could build a new power infrastructure with this money but instead is be

    1. Re:Tsarkon Reports Obama bent on bankrupting USA by Kokuyo · · Score: -1, Offtopic

      You are quite pathetic, aren't you?

    2. Re:Tsarkon Reports Obama bent on bankrupting USA by Anonymous Coward · · Score: -1, Offtopic

      Ad hominem. Can't reason an argument so attack the man and not the message.

      Sheeple.

    3. Re:Tsarkon Reports Obama bent on bankrupting USA by Jurily · · Score: -1, Offtopic

      Ad hominem. Can't reason an argument so attack the man and not the message.

      Still offtopic, so GTFO.

    4. Re:Tsarkon Reports Obama bent on bankrupting USA by Jurily · · Score: 0, Offtopic

      Well, I don't give a shit about either. What's your take on OpenBIOS?

    5. Re:Tsarkon Reports Obama bent on bankrupting USA by nedlohs · · Score: -1, Offtopic

      Yes, completely on topic for an article about putting malware in bios.

      Completely!

    6. Re:Tsarkon Reports Obama bent on bankrupting USA by flashfire · · Score: -1, Offtopic

      So did I miss the part where Obama created the exploit in the BIOS that these people are using? If not, then STFU and GTFO; god, I hate it when people post unrelated bull shit. Here is a question thought, who's BIOS was the code inserted, was it tested against non-PC BIOS? I'm just wondering if the same method would work against a Sun or Mac system.

    7. Re:Tsarkon Reports Obama bent on bankrupting USA by Anonymous Coward · · Score: -1, Offtopic

      Yes, completely on topic for an article about putting malware in bios.

      Completely!

      Now THATS on topics.

      Thanks for showing how its done.

      Since you are fucking stupid, I'll explain: I'm being facetious.

    8. Re:Tsarkon Reports Obama bent on bankrupting USA by Anonymous Coward · · Score: -1, Offtopic
      Since your such a rude stupid fucking tight ass, I figure you are inserting your Yoda doll up your ass in a painful way, here I have some help for you:

      Tsarkon Reports 9 Step Yoda Grease

      9 steps to greasing your anus for Yoda Doll Insertion!
      v 4.95.0
      $YodaBSD: src/release/doc/en_US.ISO8859-1/yodanotes/9stepprocess.sgml,v 4.95.0 2009/03/23 01:04:20 tsarkon Exp $

      1. Defecate. Preferably after eating senna, ex lax, prunes, cabbage, pickled eggs, and Vietnamese chili garlic sauce. To better enhance the pleasure of this whole process, defecation should be performed in the Return of the Jedi wastebasket for added pleasure.
      2. Wipe ass with witch hazel, which soothes horrific burns. (Rob "CmdrTaco" Malda certifies that his lips, raw like beaten flank steak from nearly continuous analingus with dogs, are greatly soothed by witch hazel.)
      3. Prime anus with anal ease. (Now Cherry Flavored for those butthole lick-o-phillic amongst you - very popular with 99% of the Slashdotting public!)
      4. Slather richly a considerable amount of Vaseline and/or other anal lubricants into your rectum at least until the bend and also take your Yoda Doll , Yoda Shampoo bottle or Yoda soap-on-a-rope and liberally apply the lubricants to the Doll/Shampoo/Soap-on-a-rope.
      5. Put a nigger do-rag on Yoda's head so the ears don't stick out like daggers!
      6. Make sure to have a mechanism by which to fish Yoda out of your rectum, the soap on the rope is especially useful because the retrieval mechanism is built in.
      7. Pucker and relax your balloon knot several times actuating the sphincter muscle in order to prepare for what is to come.
      8. Slowly rest yourself onto your Yoda figurine. Be careful, he's probably bigger than the dicks normally being shoved up your ass!
      9. Gyrate gleefully in your computer chair while your fat sexless geek nerd loser fat shit self enjoys the prostate massage you'll be getting. Think about snoodling with the Sarlaac pit. Read Slashdot. Masturbate to anime. Email one of the editors hoping they will honor you with a reply. Join several more dating services - this time, you don't select the (desired - speaks English) and (desired - literate). You figure you might get a chance then. Order some fucking crap from Think Geek. Get Linux to boot on a Black and Decker Appliance. Wish you could afford a new computer. Argue that cheap-ass discount bin hardware works 'just as well' as the quality and premium hardware because you can't afford the real stuff. Make claims about how Linux rules. Compile a kernel on your 486SX. Claim to hate Windows but use it for World of Warcraft. Admire Ghyslain's courage in making that wonderful Star Wars movie. Officially convert to the Jedi religion. Talk about how cool Mega Tokyo is. Try and make sure you do your regular 50 story submissions to Slashdot, all of which get rejected because people who aren't fatter than CowboyNeal can't submit. Fondle shrimpy penis while making a Yoda voice and saying, use the force, padawan, feeel the foooorce, hurgm. Yes. Yes. When 900 year
    9. Re:Tsarkon Reports Obama bent on bankrupting USA by Stopher2475 · · Score: -1, Offtopic

      You're really surprised that people are angry that they have to scroll by your 100 page political argument in a thread discussing computer BIOS vunerabilities?

    10. Re:Tsarkon Reports Obama bent on bankrupting USA by Anonymous Coward · · Score: -1, Offtopic

      Oh, that must be like your:
      "tt,cf"

      Your female aquantances saying:
      Too Thin, Couldn't Fuck

    11. Re:Tsarkon Reports Obama bent on bankrupting USA by Anonymous Coward · · Score: -1, Offtopic

      I guess guys with thin cocks can really spell. Must be the brain compensating for the now vestigial organ. Or is that compensation largely your homosexual endeavors?

  2. Of course. by ers81239 · · Score: 0, Offtopic

    Last I checked, the BIOS lives in a chip, not the HDD. Thus the magic diskless booting. How is this news?

    --
    there are 2 kinds of people. those who divide people into 2 kinds, and those who don't.
  3. ...but it DIDN'T work under Ninnle! by Anonymous Coward · · Score: -1, Offtopic

    ...because Ninnle Linux has adaptive protection against such things.

  4. Re:Requires root privileges or physical access by tickleboy2 · · Score: 0, Offtopic

    Mom? Is that you???

    --
    The only thing that will stop you from fulfilling your dreams is you. - Tom Bradley