
• Yes. Yes, it is.
• For a high-value target, not unheard of.
• Levels of difficulty:
–Access via DFU: Pretty difficult
–Putting server in middle: Moderate
–Executing the commands: Easy
–Duplicating the unlocked device: Trivial
–General logistics: Moderate to Difficult
Crazier than “Normal” Evil Maid?
Yes. But maybe not by much.
This is not an easy attack to pull off. It requires a fair degree of technical
sophistication, especially around the DFU-based access to the
filesystem. That’s not to mention the logistical difficulties of gaining
access to the room (and making sure the device is even in there to
begin with!).
Kommentare zu diesen Handbüchern