New Hacking Method Goes After Hardware, Not Software

[uk666 5,298]

New Hacking Method Goes After Hardware, Not Software

 

 

A Dutch team discover a new hacking method but are the big tech companies listening?

 

There is chilling news coming from a Dutch team of security researchers who discovered a brand-new method of cyberattack. Typical hacking attempts require installing malicious code on a computer then trying to find where that code is located within the system’s memory. As difficult as that is to pull off, it still leads to quite a high number of cybercrimes each year.

 

But the tech experts have now found a new method that relies on the way the computer’s processor categorizes files in its memory. According to a breakdown of the discovery by Andy Greenberg for WIRED, “The attack exploits the way microprocessors and memory interact: Processors have a component called a memory management unit that maps where a computer stores programs in its memory. To keep track of those addresses, the MMU constantly checks a directory called a page table.”

 

It is this directory that hackers can exploit, tracking their code directly to its location by following the MMU’s progress. Since it is stored in the processor’s cache and since JavaScript can actually write to this cache, even the mere visiting of a website can infect your computer now. You no longer have to click a link and work to install the virus; it is sitting in wait for the next person to happen along.

 

So Is It Really A Threat?

 

The team who discovered this method has taken pains to let the right people in on it, but so far, the response from major tech companies has been sluggish. Microsoft and Intel reportedly told WIRED there is no threat from this kind of attack, and while not the answer security experts were looking for, at least it was an answer. Other companies did not even bother responding with a comment. Apple has reportedly created an update to tighten things up in the Safari browser, but they did not specifically address this form of attack.

 

The worst possible news is that the only way to fully protect from it will be to strip the hardware, not issue a software update. As long as MMUs work this way, any update will just be a small hurdle for hackers to jump. wired

 

 

[Tech 425 3,942]

Awe Crap

[bigbenn 24]

Possible, probable - however - once warned is forearmed.

 

I read somewhere that it is theorectically possible to link all PC's together to make one supercomputer which could be used by an individual for whatever nefarious purpose and then, by disconnecting, they disappear into digital wonderland, never to be tracked or caught.

 

Back to square one. Partition your hard drive to "C" and "D" drives. Your PC locates your OS and supporting software in "C". Download and install Deep Freeze. Lock "C" and download and unpack to "D". You don't import anything malicious into "C" because of the partition which segregates it from your OS and "C" drive which is locked by Deep Freeze.

 

Before locking your "C" drive, run Spy Emergency or Emergency Kit Scanner which is free and none invasive, to remove backdoors, malware, viruses, trojans, ransomeware or root kits, but especially after installing any new software.

 

Reboot your PC with "C" frozen by Deep Freeze and carry on, completely protected from the internet and those who would wish access and/or destruction of your hard drive - Microsoft could not change my Windows 7 program to Windows 10 although they tried hard enough - even identified Deep Freeze as what was stopping them on one occasion - much to my delight.

 

I have been using Opera and Opera has tried several times to update my browser, without me knowing it has happened and each time I delete the file (about 170mb) because my "C" drive is Deep Frozen by Deep Freeze.