usb's quirks ... how to sniff bios'es messages addressed to usb rom chip
Vincenzo Di Salvo
ingegneriaforense at alice.it
Mon Mar 19 18:47:50 UTC 2018
Hello guys,
reading the FreeBSD forums I learned about the usb freebsd mailing list.
I try to explain my question.
Plugging in an hard disk into the usb port (without mounting the
filesystem), I've noticed that the inserting operation was detected by the
chip and a counter inside the HD memory was increased by one each time the
hard disk was inserted.
So a write operation has been happen !!!!!!
The drive in question is a solid hard disk SSD 1TB Samsung 850 EVO Sata III.
This test has been done on a Linux O.S (that is a very disaster in terms of
security policy, due to the demons of the GUI !)
This sounds like something done by the BIOS. Some can keep track on a wide
variety of things. For example, it happens that the Bios keep track of the
times when the case is opened.
QUESTION:
Is the FreeBSD usbdump(8) the right way to listen on events coming from
bios (in this case a writing access) and show changes happened into the rom
memory of the chip of the usb HD ?
Appreciated is any your help also about the correct sintax of the usbdump.
Thanks in advance.
Vincenzo.
---
Questa email è stata esaminata alla ricerca di virus da AVG.
http://www.avg.com
More information about the freebsd-usb
mailing list