[Beowulf] Hacked MBs It was only a matter of time

Douglas Eadline deadline at eadline.org
Fri Oct 5 08:04:09 PDT 2018


Ha! that is a pretty accurate description of how things
work in my world.

--
Doug


> Doug, you are Johnny English and I claim my five pounds.
> https://youtu.be/-Qv6p6pTz5I
>
> The plot is that all HEr Majestys agents have been compromised as they
> use digital devices.
> Johnny English (aka Doug Eadline) must be brought out of retirement
> due to using only analogue.
> The lovelt red Aston Martin belongs to Rowan Atkinson, ad is chosen as
> it has no digital ignition or ECU.
>
>
> On Fri, 5 Oct 2018 at 13:23, Douglas Eadline <deadline at eadline.org> wrote:
>>
>>
>> From a technology standpoint, this is very interesting. For me
>> the bigger picture is trusting complex things.  This is not new,
>> in 1984 Ken Thompson brought up software "bugging"
>>
>> http://wiki.c2.com/?TheKenThompsonHack
>>
>> Funny, many of my non-geek friends
>> are surprised at my skepticism and mistrust of
>> many things digital.
>>
>> --
>> Doug
>>
>>
>>
>> > That is a tiny capacitor that sits on your motherboard with a very
>> thin
>> > glue. You practically need a microscope to move one, and there are
>> > hundreds of them on each board. So which one is it? Maybe you can just
>> > scrape it off.
>> > Buy there is another problem: OEM. That means an outside builder,
>> > Supermicro perhaps built your motherboard.
>> > And, why tell this story 3 years later?
>> > Buy in the subject of removing it, a capacitor reads a tiny stream of
>> > electricity and opens its hate at a determined voltage, correct? That
>> sets
>> > off another capacitor and so on until what exactly happens?
>> >
>> > On October 4, 2018, at 7:08 PM, John Hearns via Beowulf
>> > <beowulf at beowulf.org> wrote:
>> >
>> > Thankyou to James Cuff for linking to The Register's article :
>> > https://www.theregister.co.uk/2018/10/04/supermicro_bloomberg/
>> > On Thu, 4 Oct 2018 at 20:52, Andrew Latham <lathama at gmail.com> wrote:
>> >>
>> >> And news directly from Supermicro
>> >> https://www.supermicro.com/newsroom/pressreleases/2018/press181004_Bloomberg.cfm
>> >>
>> >> On Thu, Oct 4, 2018 at 8:48 AM Douglas Eadline <deadline at eadline.org>
>> >> wrote:
>> >>>
>> >>> https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies
>> >>>
>> >>> (limited free articles)
>> >>>
>> >>> First question: So who has Supermicro motherboards?
>> >>> Second question: Where else are these devices?
>> >>> Third question: Who else is making/inserting these kind of devices?
>> >>>
>> >>>
>> >>>
>> >>> --
>> >>> Doug
>> >>>
>> >>> --
>> >>> MailScanner: Clean
>> >>>
>> >>> _______________________________________________
>> >>> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin
>> >>> Computing
>> >>> To change your subscription (digest mode or unsubscribe) visit
>> >>> http://www.beowulf.org/mailman/listinfo/beowulf
>> >>
>> >>
>> >>
>> >> --
>> >> - Andrew "lathama" Latham -
>> >> _______________________________________________
>> >> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin
>> Computing
>> >> To change your subscription (digest mode or unsubscribe) visit
>> >> http://www.beowulf.org/mailman/listinfo/beowulf
>> > _______________________________________________
>> > Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin
>> Computing
>> > To change your subscription (digest mode or unsubscribe) visit
>> > http://www.beowulf.org/mailman/listinfo/beowulf
>> > _______________________________________________
>> > Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin
>> Computing
>> > To change your subscription (digest mode or unsubscribe) visit
>> > http://www.beowulf.org/mailman/listinfo/beowulf
>> >
>> > --
>> > MailScanner: Clean
>> >
>> >
>>
>>
>> --
>> Doug
>>
>> --
>> MailScanner: Clean
>>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit
> http://www.beowulf.org/mailman/listinfo/beowulf
>
> --
> MailScanner: Clean
>
>


-- 
Doug

-- 
MailScanner: Clean



More information about the Beowulf mailing list