Hardwear.io NL 2023 | Basebanheimer: Now I Am Become Death, The Destroyer Of Chains -Daniel Komaromy скачать в хорошем качестве

Hardwear.io NL 2023 | Basebanheimer: Now I Am Become Death, The Destroyer Of Chains -Daniel Komaromy

Talks about baseband vulnerabilities are certainly in fashion these days, mostly inspired by the trailblazing work of the likes of RPW, Nico Golde, Amat Cama, Marco Grassi, and Xingyu ‘Kira’ Chen (not to mention yours truly - a little self promotion never killed nobody). With the novelty of baseband-only vulns wearing off, is it time to take it up a notch? This talk will go after the goal of full chain exploitation and show baseband rce and baseband-to-android pivot vulnerabilities that could have been exploited by malicious actors to go from "zero click" to "zero barriers against stealing user data". I will talk about our custom-built static and dynamic analysis tools written for the newest iterations of Samsung and Mediatek chipsets, such as the nanoMIPS-based Dimensity, about remotely exploitable vulnerabilities in baseband attack surfaces that were passed over previously and finally about the vulnerabilities we found in Android, the Linux Kernel, and beyond to chain with baseband rce. ------------------------------------------------------------------------------------------------------------------------------------------------------- Website: https://hardwear.io X :   / hardwear_io   LinkedIn:   / hardwear.io-hardwaresecurityconferenceandt...   Facebook:   / hardwear.io