Full Disclosure mailing list archives

Re: AFS - The Ultimate Sulution?


From: Siim Põder <windo () p6drad-teel net>
Date: Wed, 20 Sep 2006 17:41:04 +0300

Yo!

Paul Sebastian Ziegler wrote:
Thats a good point. Since the loader is part of the workstation it
should be possible to swap it with full system-control.
But what if this loader would also be taken from another server - say by
using Netboot or something similar? Then it would be out of the reach of
even root.

Is it possible to update BIOS memory from outside of BIOS? If so, then
it would be possible to turn netboot off after compromising root.

Siim Põder

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: