Re: [9fans] ISP filtering - update (fwd)

[Ralph Corderoy <ralph@inputplus.co.uk>]

[-- Attachment #1: Type: text/plain, Size: 36 bytes --]

[Replace this with your comments.]

[-- Attachment #2: Type: message/rfc822, Size: 1883 bytes --]

From: Ralph Corderoy <ralph@inputplus.co.uk>
Subject: Re: [9fans] ISP filtering - update
Date: Mon, 25 Apr 2005 08:59:53 GMT
Message-ID: <a6c.426ac806.5d71f@blake.inputplus.co.uk>

Hi,

Presotto wrote:
> I wrote:
> > What I don't understand is why the worms don't trigger some harm at
> > some point in the future, like setting the hard drive password to a
> > random string.  Requiring the `master' password from the drive
> > manufacturer or OEM would cause enourmous amounts of hassle.  The
> > worm would have meanwhile re-produced elsewhere so its not `shooting
> > itself in the head'.
>
> I didn't even realize that there were hardware enforced passwords on
> disks.  I just looked up ata specs and found a whole slew of security
> cruft I never knew about.  Thanks.

c't have recently published an article covering the potential misuse of
the ATA security functions so perhaps we'll start seeing some exploits
of it now.

    http://www.heise.de/ct/english/05/08/172/

Cheers,


Ralph.