lainchan / sec

how likely is it for my bios to be infected with a spyware?

Fred Nurk · 2021-05-31 02:56
how likely is it for government glows to target some figures computers to flash them with malicious bios roms? this is irrelevant but I got this schizo Idea after this happened: I am sort of a schizo now, it's a long story but, I always felt like the glows are most likely keeping an eye on me (that's all you need to know for now) but about a year ago I ordered a laptop from a website and it was held in the customs (since I don't live in the US from where I ordered the laptop), anyway as I said, the shipping company called me and asked me to send them the customs money and some documents (usual soykaf), I did that. Months after I did and I heard absolutely nothing from them anymore, I called them multiple times and their usual response was that they always contact the customs officers and they don't respond, and it's out of their control for now. then all of sudden after about almost a year (like 10 months I guess) the delivery man contacted me to deliver the package. I got the package it was was fine, but opened, not only the external box (which is enough to check the item), but the whole thing. I got suspicious about it, and picked up the laptop turned it on, it seems like it was never turned on at all, booted to the windows10 home setup process. of course I installed Linux and updated my bios to the latest version from the manufacturer website. but still I was super paranoid about the bios, they could have opened the laptop carefully and flashed a malicious rom. I wouldn't have thought that if it wasn't for the other series of suspicious events that happened to me before and after which I don't want to get into right now.
Yu-ichi · 2021-05-31 03:18
order a cheap shinkshit laptop from banggood, you wont have this issue.
藤原純一 · 2021-05-31 03:36
If you have the Intel Mangement Engine then you have spyware in your UEFI EEPROM.
Technician · 2021-05-31 03:38
Sorry to break it to you but you are not paranoid enough.If glows wanted to spy on you they could physically add a component to the motherboard without you knowing and without tinkering with the bios.Having the latest version of big brothers boot system wont save you either. No idea why you would think that. You should have bought your machine from china or somewhere that cant do soykaf to you if they spy on you. You ordered from America? LOL u fuarrrked up.
Acacius · 2021-05-31 03:54
OP it's not going to take them 10 months to fuarrrk with your bios. If you were being targeted they would intercept it and quickly do their changes and the package would not have been left obviously tampered with. I wouldn't lose sleep over this at all.
Morpheus · 2021-05-31 11:33
the glows keep an eye on everyone fren can we trust chinese lenovo firmware for example? probably not
Hong, Guil Dong · 2021-05-31 13:09
The last thing you should do when under suspicion of surveillance is ordering computer equipment from abroad with your real name, bank account and address. You done big stupid.
Wintermute · 2021-05-31 13:55
>>15966 True. Op next time get some cash,and look for computer shops you can physically travel to. Purchase from those if this is your threat model.
Pris · 2021-05-31 13:59
>>15966 depends if you have the knowhow to use said equipment to findout who is surveilling you
Y.T · 2021-05-31 14:10
1. malware comes without your gov trying to stalk you. There are numerous examples of hardware malware buildin. I.E. usb sticks that had firmware hiding documents copied in a hidden sector 2. bios can be flashed live remote. In conclusion caring about tampering en route seems pointless because it can be infected either way.
Nell · 2021-05-31 17:21
>>15958 are you israeli? my mail gets held up in the exact same way, and i'm 100% on a list. half my fuarrrking mail ends up getting held for a month or more at customs, every fuarrrking time. letters, parcels, everything. and, yes, all my soykaf is confirmed bugged since my stalking glowies developed a sense of humor after 10 years
John Doe · 2021-05-31 17:30
>>15969 OP clearly doesn't because he's a freetard channer halfwit. What he described is third world customs experience, not MOSSAD installing taps on hardware like he's the next Assange or something. In case of real-world situation under threat, not just a larp for lainchan upboats, the procedure goes as this: obtain schematics, firmware and photos of untampered equipment over secure channels, order live equipment over insecure channel, inspect equipment for tampering evidence, perform full firmware overhaul (overwrite it with cheap programmer dongle from any existing computer that is considered safe).
Eldon Tyrell · 2021-05-31 17:57
>>15973 and you think that lets you get around the hardwired backdoors laid into every single mass-market chipset? for soykaf's sake, dude. if you manage to find and remove a compromised piece of hardware (good luck), that's just going to be courtesy of whichever agency decided to bug you. the CIA will *always* have a backdoor, if you're not using an airgapped offline system, you bet they can do it. it just takes more effort and power to get past the encryption some people here have got set up, not worth their time usually. https://wikileaks.org/ciav7p1/
Hiro Protagonist · 2021-05-31 19:11
>>15974 OP is some turd world jungle dweller whose main concern is his local STASI, as he had implied in computer being held at customs. Whatever exists "by default" as part of hardware off-factory is certainly out of reach for mere mortals like ourselves, it certainly would not require 10 months of hold at customs to be activated. By the way, the post you are replying to, specifically addresses Vault 7-type hardware taps and firmware backdoors installed intermediately. After you overwrite every memory chip which can be written to with clean firmware, you get strictly speaking, a factory-reset hardware. Btw, just noticed, WikiLeaks advertises Beat-Cohen in their footer instead of Monero.
Naomi Nascimento · 2021-05-31 19:15
>>15977 >Btw, just noticed, WikiLeaks advertises Beat-Cohen in their footer instead of Monero. and you think assange isn't some cult family acid baby running psyops for the illuminati? you'd be kidding yourself. he didn't breathe a word about the AI that's running around the internet impersonating people, even though we know damn well botters have been doing it for years in their parents' basements. let alone the CIA. he's an agent, just like anyone else. just like you.
Hacker · 2021-05-31 19:26
>>15972 Possible the intelligence agency is trying to send a message.Like "Stop causing trouble". fuarrrk being on a list in Israel :/ >>15973 Also possible that a third world government would be in such disarray that it would take them months to finally install hardware on OP's device.Or to contract someone who could. >>15979 You forgot to take your meds
Ein · 2021-06-01 00:15
>>15980 >take your meds this site needs a bot proof captcha
Unspecified · 2021-06-01 00:29
>how likely is it for government glows to target some figures computers to flash them with malicious bios roms? more likely to put intentional vulnerabilities in all silicon and drop in some malware on an as-needed basis
Sipho Nkosi · 2021-06-01 00:33
>>15984 >more likely to put intentional vulnerabilities in all silicon and drop in some malware on an as-needed basis this is it. weren't there some leaks a while back that described china doing exactly that? therefore, everyone does it.
Miho Iwakura · 2021-06-01 00:35
>>15985 it would be funny if Chinese, Russian, and American glows were all constantly fighting over who gets to use what bug.
Ivan Petrov · 2021-06-01 00:53
>>15986 i figure it's turned into a space war for satellite-based AI servers now.
Otto Normalverbraucher · 2021-06-01 09:19
>>15986 intels spectre&ghost comes to mind.