you are viewing a single comment's thread
view the rest of the comments
[–] 42 points 9 months ago (7 children)

That is amazing. The x-ray of it is kind of scary, honestly. That little chip could be all it would take to get into an air-gapped machine.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 17 points 9 months ago (5 children)

    There are a ton of different payloads that can be run on these, for everything from simple keylogging, to root access, to network backdoors. I've only recently gotten into pentesting but with something like this there's no real limit to the damage that could be done with only a few seconds of physical access.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 21 points 9 months ago (2 children)

    Honestly, as a Systems/DevOps engineer it's always been well know that if you have physical access, you have zero chance of security. Sure it might take more time if precautions were followed, but you will be owned eventually, that's guaranteed.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 10 points 9 months ago (1 child)

    This is one of our most frustrating fights I have with our security design reviewers. Effectively functionless mitigations that create extra obstacles for our service reps to deal with during troubleshooting. One example is our equipment is installed in access restricted areas, in a locked rack. We don’t need to disable unused Ethernet ports on our networking equipment that exists in a locked cabinet and it will take away our ability to repatch equipment to a different switch in the system to assist in troubleshooting.

  • source
  • parent
  • hideshow 1 child comment