Date   : Sun, 01 Aug 2010 17:58:47 +0100
From   : percy.p.person@... (Ed Spittles)
Subject: bbcdocs website problem

(Oops, re-send including the list...)

On 1 August 2010 15:37, Rick Murray <rick@...> wrote:
> On 28/07/2010 05:18, Rick Murray wrote:
>
>> The mom filter is like chinese whispers, so if that doesn't make a lot
>> of sense, you're not alone. I guess I'll keep an eye on El Reg to see if
>> I can find some actual info on this. ;-)
>> I'm highly suspicious of the bit about affecting both Win AND the
>> penguin. Though if this were true...
>
> It would appear to be a vuln in PCMCIA...? The article is about three
> quarters (21m 06s) into the DigitalP podcast, available at:
> http://downloads.bbc.co.uk/podcasts/worldservice/digitalp/digitalp_20100727-1032a.mp3
>

Thanks for the pointer.  Sounds like this:
http://www.zdnet.co.uk/news/security-threats/2010/06/11/windows-7-open-to-attack-via-memory-40089203/

"Christophe Devine and Damien Aumaitre ... will present their research
in a presentation called Subverting Windows 7 x64 Kernel with DMA
Attacks at the Hack in the Box security conference"

> Does anybody have further information on this? I'm wondering how a vuln
> on a PCMCIA card can affect Windows, Apple, and Linux.

I think it's an attack on the firmware running on the card, which can
then DMA some damage into the physical memory, which bypasses any OS
protection.

Cheers
Ed