Full Disclosure mailing list archives

RE: Get this dude.


From: Kenton Smith <ksmith () chartwelltechnology com>
Date: 29 Jan 2004 13:56:49 -0700

Whoa buddy, what is your problem? I ask an innocent question of an
apparent expert and all I get is this? I said I wasn't a programmer, I
didn't say I was stupid. Of course I understand that you can write a
program to this type of hardware, seems the BIOS companies do it on a
regular basis.
If you want to know what my problem is (other than unhelpful yet
demeaning responses), I want to know if it's possible to put a 624 byte
backdoor in the BIOS (without reducing its ability to do eveything else
that it's supposed to do). This is a serious issue and a serious
question. Is it possible in a program this size written in this language
to communicate with a network card and do all the stuff necessary to
communicate across the Internet?

Seemed like a simple question to me.

P.S. Maybe I am stupid though because all that Moby Dick crap didn't
make any sense to me.

On Thu, 2004-01-29 at 12:41, Clairmont, Jan wrote:
I used to be an embedded assembly programmer,  Intel 8080, Zilog Z80,
Intel 8088, 8086 etc.  It is not that hard to write code to a flash prom or
other types of flash memory or static memory.  Whether it is in forth, c or
assembly, you can deposit information and recall it.  So what is your
problem?

The person below did an excellent forensic job of disessembling the code and
reporting the information, kudos to Juari.  Are we security people or No,
then 
Captain Ahab said, "let's all make this pledge, Death to Moby Dick!"

Not that I like killing white whales, Moby Dick's one of my favorite Novels.

I'm claiming the 250,000 if Juari doesn't get it first!
Jan Clairmont



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: