Top all-time · #4155
DMA
Personal blog · blog.frizk.netsecurityhardware
DMA is a personal blog at blog.frizk.net about security and hardware. Since 2016, 17 different Hacker News readers have linked it 18 times, most often “Attacking UEFI Runtime Services and Linux”. The last post was in 2021, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for posts on PCILeech and DMA attacks, including memory process file system and using a BMC as a DMA device. The comments only cite these posts and do not judge the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Attacking UEFI Runtime Services and Linux3 people · 3 mentions · first linked 2017-01-11
- Modifying the Acorn CLE-215 FPGA into a PCILeech DMA Attack Device2 people · 2 mentions · first linked 2021-10-24
- MacOS FileVault2 Password Retrieval2 people · 2 mentions · first linked 2016-12-15
- Total Meltdown?2 people · 2 mentions · first linked 2018-03-27
- Total Meltdown?2 people · 2 mentions · first linked 2018-03-28
- Introducing the Memory Process File System for PCILeech2 people · 2 mentions · first linked 2018-03-28
What Hacker News says?
Two related links previously on HN (no comments): Introducing the Memory Process File System for PCILeech http://blog.frizk.net/2018/03/memory-process-file-system.htm... Using your BMC as a DMA device: Plugging PCILeech to HPE ILO 4 https://www.synacktiv.com/posts/exploit/using-your-bmc-as-a-...
Comment linking /2018/03/memory-process-file-system.html
on “PCILeech”Submitted Windows 7 patch for Meltdown enabled arbitrary reads and writes in kernel memory as a story · 545 points
HN discussionA few thoughts: yes, UEFI is a large attack surface. Secure Boot mitigates a lot of that - if it's turned on, the vast majority of UEFI functionality is only accessible to signed binaries. If you're running untrustworthy code in your boot environment then it's already in a position to just overwrite the firmware, there's no memory protection here. But UEFI doesn't entirely go away after the OS boots, there's some nu…
Comment linking /2017/01/attacking-uefi-and-linux.html
on “Twitter Client for UEFI”Submitted MacOS FileVault2 Password Retrieval as a story · 274 points
HN discussionCrypto-surplus hardware with same FPGA, https://www.hivelist.org/@apshamilton/acorn-215-xilinx-artix... & https://www.eevblog.com/forum/fpga/sqrl-acorn-as-an-interest... Artix-7 is supported by LiteX, an open-source toolchain based on reverse engineering of Xilinx bitstream, https://github.com/enjoy-digital/litex & https://antmicro.com/blog/2020/05/multicore-vex-in-litex/ These can be used for PCILeech DMA attacks/t…
Comment linking /2021/10/acorn.html
on “NiteFury – An Artix-7 FPGA with its own DDR3 RAM right in your laptop”Submitted Modifying the Acorn CLE-215 FPGA into a PCILeech DMA Attack Device as a story · 36 points
HN discussionSubmitted MacOS FileVault2 Password Retrieval as a story · 8 points
HN discussionSubmitted Total Meltdown? as a story · 5 points
HN discussionSubmitted Total Meltdown? as a story · 3 points
HN discussionSubmitted Attacking UEFI (2017) as a story · 2 points
HN discussionSubmitted Total Meltdown? as a story · 2 points
HN discussionSubmitted Attacking UEFI Runtime Services and Linux as a story · 2 points
HN discussionSubmitted MacOS FileVault2 Password Retrieval as a story · 2 points
HN discussionSubmitted January Windows 7 Meltdown Patch Introduced a Critically Deeper Vulnerability as a story · 1 points
HN discussionSubmitted Introducing the Memory Process File System for PCILeech as a story · 1 points
HN discussionSubmitted Attacking UEFI Runtime Services and Linux as a story · 1 points
HN discussionSubmitted Windows 10 KASLR Recovery with TSX as a story · 1 points
HN discussionSubmitted DMA attacking over USB-C and Thunderbolt 3 as a story · 1 points
HN discussion
