Re: Exploiting PCI-based DMA in OpenBSD

2015-04-06 Thread Артур Истомин
On Sun, Apr 05, 2015 at 09:43:55AM -0600, Theo de Raadt wrote: > >Why don't you craft the attack yourself and report to OpenBSD > >your results? > > Quite obvious why the question was asked, rather than studied. Yes, it is obvious. Because I'm incompetent, otherwise I would not ask. (But this tr

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-05 Thread Theo de Raadt
>Why don't you craft the attack yourself and report to OpenBSD >your results? Quite obvious why the question was asked, rather than studied. >On Sat, 4 Apr 2015, ? ??? wrote: > >> https://github.com/carmaa/inception/blob/master/README.md >> >> Is OpenBSD susceptible to this attack? I mea

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-05 Thread Diana Eichert
Why don't you craft the attack yourself and report to OpenBSD your results? On Sat, 4 Apr 2015, ? ??? wrote: https://github.com/carmaa/inception/blob/master/README.md Is OpenBSD susceptible to this attack? I mean not tool themself, I mean vector of attack.

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-05 Thread Kyoung Jae Seo
And you are correct :) http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/ieee1394/ removed 10 years ago. Sleep well on attic 2015-04-05 6:45 GMT+00:00 ludovic coues : >>> INCEPTION >>> = >>> > > >>> Once DMA is granted, the tool proceeds to search through available memory >> pages >>>

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread ludovic coues
>> INCEPTION >> = >> >> Once DMA is granted, the tool proceeds to search through available memory > pages >> for signatures at certain offsets in the operating system’s code. Once > found, I only have second hand knowledge of all this stuff. Following information might be wrong. Martin

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Joel Rees
Thank you for taking the trouble. My thoughts? This is a bit of the kind of code you'd write in an introduction to device drivers or an OS programming class. As others have said, really old news, and an indication of the kind of trash an industry led by Intel and Microsoft has foisted on the world

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Mark Kettenis
> All this is true and I totally agree with you. But there are partial > workarounds against this attack (see Windows/MacOS). All I wanted to > know whether there were any work in this direction. I'm not a programer. > It is impossible for me to answer to yourself by studying commits to CVS. An I

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Артур Истомин
On Sat, Apr 04, 2015 at 11:49:08AM -0400, Nick Holland wrote: > On 04/04/15 10:17, Артур Истомин wrote: > > On Sat, Apr 04, 2015 at 03:27:05PM +0200, Martin Schröder wrote: > >> 2015-04-04 13:08 GMT+02:00 Артур Истомин : > >> > https://github.com/carmaa/inception/blob/master/README.md

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Yonas Yanfa
On 15-04-04 02:24 PM, Joel Rees wrote: On Apr 4, 2015 8:50 PM, "�ртур И�томин" wrote: https://github.com/carmaa/inception/blob/master/README.md I am not accessing that because, right now, I don't have a stable device with which to access arbitrary stuff on the web. Here's the te

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Joel Rees
On Apr 4, 2015 8:50 PM, "Артур Истомин" wrote: > > https://github.com/carmaa/inception/blob/master/README.md I am not accessing that because, right now, I don't have a stable device with which to access arbitrary stuff on the web. > Is OpenBSD susceptible to this attack? I mean not t

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Nick Holland
On 04/04/15 10:17, Артур Истомин wrote: > On Sat, Apr 04, 2015 at 03:27:05PM +0200, Martin Schröder wrote: >> 2015-04-04 13:08 GMT+02:00 Артур Истомин : >> > https://github.com/carmaa/inception/blob/master/README.md >> > >> > Is OpenBSD susceptible to this attack? I mean not tool thems

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Артур Истомин
On Sat, Apr 04, 2015 at 03:27:05PM +0200, Martin Schröder wrote: > 2015-04-04 13:08 GMT+02:00 Артур Истомин : > > https://github.com/carmaa/inception/blob/master/README.md > > > > Is OpenBSD susceptible to this attack? I mean not tool themself, > > I mean vector of attack. > > There is no Firewrir

Re: Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Martin Schröder
2015-04-04 13:08 GMT+02:00 Артур Истомин : > https://github.com/carmaa/inception/blob/master/README.md > > Is OpenBSD susceptible to this attack? I mean not tool themself, > I mean vector of attack. There is no Firewrire support in OpenBSD, so no. Btw: This is old news.

Exploiting PCI-based DMA in OpenBSD

2015-04-04 Thread Артур Истомин
https://github.com/carmaa/inception/blob/master/README.md Is OpenBSD susceptible to this attack? I mean not tool themself, I mean vector of attack.