On Wed, 14 Mar 2018, [email protected] wrote: > On 03/13/2018 11:05 PM, [email protected] wrote: > > > If I pull the WiFi card out and don’t connect the Ethernet port to anything, > > then I configure qubes to use only a usb WiFi adapter (as I indicated > > above), I’m pretty sure that the ME engine won’t be able to use any of the > > three network interfaces to phone home. For ME to work over a network, it > > has to have a driver for the network adapter. It is unlikely to have one for > > the USB adapter. > I would re-read what I stated before - a hypothetical backdoor can easily use > simple P2P DMA writes it doesn't need drivers.
Given that should attack should make sure that device won't crash when such a hypotetical backdoor is using DMA while something else is using the device through the normal driver at the same time, I'd seriously consider removing at least the "simple" qualifier from there. Alternatively, the attack needs synchronization besides DMA which also invalidates your claim that simple P2P DMA is enough. -- i. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/alpine.DEB.2.20.1803140939280.5829%40whs-18.cs.helsinki.fi. For more options, visit https://groups.google.com/d/optout.
