Jump to content

usb chainsaw?


deathwarder

Recommended Posts

It does say that it will work on many x86 systems, so shouldn't it at least work with most linux distro's? Or mac os x intel?

As far as I know it still requires the use of windows binaries to work, which can't be executed natively on Mac OS (any version), Linux (apart from Linspire) or BSD.

Link to comment
Share on other sites

well,

"Still in early development, the USB Chainsaw is described as a all purpose physical access hacking device able to take advantage of many x86 based operating systems, including Windows and Linux. No other details are available at time of writing. Dev5 Project"

right from the wiki, that means at least linux will be supported.

Link to comment
Share on other sites

1. Very unlikly since the Wiki says early development. I would be suprised if there was a proof of concept or anything yet.

2. I dunno

3. Same way it'll exploit Windows: scripts and 3rd party programs. Linux is not completly secure. It's still coded by humans, thus susceptible to flaws. My belife is that the magic that keeps Linux and MacOS from being exploited is lack of users.

4. No clue.

Link to comment
Share on other sites

Linux is not completly secure. It's still coded by humans, thus susceptible to flaws. My belife is that the magic that keeps Linux and MacOS from being exploited is lack of users.

This is 100% accurate. I believe the only reasons we haven't seen more malware for Linux and OSX is that there is simply not enough opportunity for gain due to:

1. Lack of popularity

2. Technical proficiency and savvy of those users (Linux).

If/when these OS's really get momentum, like Windows has, and are adopted by the technically ignorant masses, we will see just as many attacks on them.

Link to comment
Share on other sites

The only kinds of Linux set ups I can see it effecting are:

Linux distros that have automouning turned on (security risk, but convenient), but nothing will run automaticly.

Linux has been configured (in fstab) to allow normal users to mount /dev/sda, /dev/sdb and so on.

If neither of these situations are the case then I would say the only other way it would effect Linux is if you booted an OS off the thing.

Link to comment
Share on other sites

Linux is not completly secure. It's still coded by humans, thus susceptible to flaws. My belife is that the magic that keeps Linux and MacOS from being exploited is lack of users.
i actually think its for a large part due to the huge development community's some linux distro's have , if something is found it'll b patched .....

wich windows doesnt have ....

Link to comment
Share on other sites

I think you are all missing the point that the flaw that will be exploited here is more a design flaw rather then a software flaw. For this to work on Linux, either normal users must be permitted to mount /dev/sda (or applicable), or, there must be an automounter demon running which automaticly mounts devices.

Link to comment
Share on other sites

Will it be on the next episode? :pirate: no one can be really sure, unless of course you were watching Darren edit the episode (because I have a sneaking suspicion that he is) But you would have to know Darren... to be at his place... to watch him edit... Arrrg! *coughlinkisinthesmilycough*

*goes about his business acting like nothing happened*

Link to comment
Share on other sites

Let me just say that "The USB <blah>" is getting old. The hacksaw was little more than a particular payload for the Switchblade. Presumably the Chainsaw will be similar. If so, they should really *NOT* do something like that for the episode following this one.

Link to comment
Share on other sites

Yes, you can watch the EditCam

No, the episode will not be released on the 5th of November. (It will come out sooner than that. Within hours-days actually)

Yes, the chainsaw exploits most operating systems running on x86 within certain conditions.

No, there isn't any proof of concept code yet.

Anyway, think outside the box. Who needs linux/windows/mac exploits when you have physical access to the drive.

Oh, and the name is simply a code name, likely for googleability.

Link to comment
Share on other sites

Yes, you can watch the EditCam

Ohhh... I thought it may have been a easter egg of Christmas past (I thought that metaphor would have worked out better). And I didn't want to get whacked for giving away that the edit cam was still in service. So, as the old saying goes "When in doubt, act like a raving lunatic and people will just back away slowly"

Link to comment
Share on other sites

Yes, the chainsaw exploits most operating systems running on x86 within certain conditions.

Surly that means you are booting another OS off the USB flash... and, not stopping there, including EFI support so it will work on Intel macs?

If you have physical access to the computer, you can mount the drive under Linux, and run w/e from there. He never did say Switchblade-esque functionality.
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...