Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: WiFi Device Driver Issues SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
WiFi Device Driver Issues
Last weeks Intel Centrino issues where just the beginning. Today, Jon Ellch and David Maynor presented more wireless device driver issues at Blackhat. As a demo, they compromised a MacBook using one of the wireless device driver issues they discovered.

The highlights:
  • This is less of an OS problem, but a firmware/driver issue. While the demo was done on a Mac, it would have worked on other OS's as well.
  • Various wireless cards have problems, not just the once demoed at Blackhat.
  • You do not have to be associated with a wireless network in order to be exposed.
  • A firewall will not protect you.
What can you do:
  • Turn off the wireless card (and bluetooth while you are at it).
  • Watch for patches.
  • To prepare for any patches, learn what type of wireless card you have.
More details:

Washington Post "Securityfix" blog (Brian Krebs)
the video

I will be teaching next: Defending Web Applications Security Essentials - SANS San Francisco Spring 2020

Johannes

3693 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!