Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
05-31-2005, 06:44 PM
|
#1
|
|
Member
Registered: Dec 2004
Distribution: SuSE, RedHat, ubuntu, Debian
Posts: 734
Rep:
|
Has your motherboard or hardware device been "Cracker Flash-Trashed" today?
Has your motherboard or hardware device been "Cracker Flash-Trashed" today?
What is "cracker flash-trashed"?
It's when a system motherboard or hardware device has been partial or fully flashed with bad code, as in bios or firmware upgrade. Which of course renders it completely useless, as in "totalled".
How do "crackers" (hackers gone bad and bent on evil) do this nasty deed?
They crack through the security, both physical (bios password) and operating system of your system, run a scan on the sys and periph's, then flash the devices that can be flashed with hacked code or original code with a "force" command through a tcp/ip connection which they sever in midstream by killing the tcp/ip stream. Which if you didn't know renders all devices done as in hosed, trash.
Nifty, huh?!
Nope! They are evil meanies that need to be brought to justice!!!
So if your hardware starts acting up after you've been on the Internet, don't be too suprised if it's not juse a permission problem as this is the cost for running a system that doesn't have an embedded operating system.
What can be don't about this to protect your "non-embedded linux system"?
No Firetrucking Idea (nfi).
Note: The definition of "hardware device" includes all devices that are able to have their firmware or bios updated with code from the manufacturer that made the device. Which includes CD-ROM, CD-RW, DVD, DVD-RW, DAT, HD, RAID controller, sata controller, scsi controller, network card, video card, sound card, modem, etc.
Note: "Crackers" can also "burn out" your monitor or damage it if the "crack" they perform is also one on the video settings of the X Window System server.
Just a friendly fyi....
|
|
|
|
06-01-2005, 11:48 AM
|
#2
|
|
Member
Registered: Jan 2005
Distribution: SUSE, LFS
Posts: 357
Rep:
|
You must be running Windows.
|
|
|
|
06-01-2005, 03:54 PM
|
#3
|
|
Senior Member
Registered: Dec 2003
Location: Shelbyville, TN, USA
Distribution: Fedora Core, CentOS
Posts: 1,019
Rep:
|
Quote:
|
Note: "Crackers" can also "burn out" your monitor or damage it if the "crack" they perform is also one on the video settings of the X Window System server.
|
For the last few years, the monitors that you buy will not get "burned out" if you go beyond their operating frequencies. They now display a message that says "out of range" or something like that or just stay blacked out until the frequency is OK. Older monitors don't do this and try to display the setting they can't do. You used to could ruin your monitor if you setup X incorrectly.
|
|
|
|
06-01-2005, 05:35 PM
|
#4
|
|
Member
Registered: Dec 2004
Distribution: SuSE, RedHat, ubuntu, Debian
Posts: 734
Original Poster
Rep:
|
|
|
|
|
06-01-2005, 07:42 PM
|
#5
|
|
Member
Registered: Jan 2005
Distribution: SUSE, LFS
Posts: 357
Rep:
|
Absolutely hate people that post links without saying anything to contribute.
This whole thread is trash and certainly shouldn't be in Security.
Script-kiddies should be required to go through training before allowed access to a browser.
|
|
|
|
06-02-2005, 04:26 PM
|
#6
|
|
Member
Registered: Oct 2004
Location: USA
Distribution: Vector Linux 5.1 Std., Vector Linux 5.8 Std., Win2k, XP, OS X (10.4 & 10.5)
Posts: 344
Rep:
|
Sounds like FUD to me..
Where is the "profit" in destroying a cracked computer?
The is coming when script kiddies are going to find themselves hunted down by angry lynch mobs.
|
|
|
|
06-04-2005, 12:57 AM
|
#7
|
|
Member
Registered: Dec 2004
Distribution: SuSE, RedHat, ubuntu, Debian
Posts: 734
Original Poster
Rep:
|
just how new is everyone's monitors then?
since "new monitor" is a vague statement and not everyone in the world who has a computer bought it new to run Linux, I'd say 'burning out' a monitor is more than likely since the majority of monitors in the world are NOT the new smart type as most people buy new computers and keep the old monitor because, well, quite frankly, it's still working, unless the size is too small for the users needs.
And then of course if and when your sys gets trashed, you'll be convinced it can be done.
.... Since when do 'hackers gone bad' have interest in making a profit? I thought their main creedo is 'destroy and conquer or conquer and destroy'! those evil meanies!!!!
|
|
|
|
06-04-2005, 04:09 AM
|
#8
|
|
Member
Registered: Apr 2005
Distribution: LFS 5.0 and 6.1
Posts: 705
Rep:
|
eh, I'm not worried. I run Linux for 6 yrs now, never been compromised! these script kiddie/punk/losers are not good enough to get into my boxes!! 
|
|
|
|
06-12-2005, 09:06 PM
|
#9
|
|
Member
Registered: Dec 2004
Distribution: SuSE, RedHat, ubuntu, Debian
Posts: 734
Original Poster
Rep:
|
I forgot to add where I got the content for this thread. I researched various security websites and the linux doc proj which had a notrious message:
systems can be taken over or worse
the 'or worse' part is what this thread is mentioning.
many sites including TLDP don't go into detail because they don't want people to freak out that their systems can not only be 'cracked', but they can be 'destroyed'.
|
|
|
|
06-13-2005, 06:33 AM
|
#10
|
|
Member
Registered: Sep 2003
Location: Delaware, USA
Distribution: Ubuntu 12.04 LTS
Posts: 55
Rep:
|
You say that you have done research - but I do not see any links to prove what you are telling us. Please post links.
Later
Bob W.
|
|
|
|
06-13-2005, 03:23 PM
|
#11
|
|
Member
Registered: Feb 2005
Distribution: Arch current, SuSe 10.1 32-bit, FreeBSD current, OpenBSD 4.0
Posts: 453
Rep:
|
Quote:
|
many sites including TLDP don't go into detail because they don't want people to freak out that their systems can not only be 'cracked', but they can be 'destroyed'.
|
Sounds like conspiracy theory, did you lately watch Mel Gibson movie?
|
|
|
|
06-14-2005, 12:52 AM
|
#12
|
|
Member
Registered: Oct 2003
Distribution: Slackware
Posts: 101
Rep:
|
The important part that you forget to mention is that a cracker would need to get root privlages for your system. Then they would have to see what hardware you have, upload the flash utility, and then run it. Also most motherboards cannot be flashed while the system is running, they need to be booted to a clean DOS enviroment. Now you may be able to flash firmware for CDROMs and the like but of course you could always flash them back. Hardware vendors are aware that people can flash unsigned firmware that's why they often have checksums or digital signatures that must be present to preform the operation. What your describing would be a very rare occurance and I would be surprised if it ever happended.
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 03:30 PM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|