OSDev.org

The Place to Start for Operating System Developers
It is currently Thu Mar 28, 2024 2:57 am

All times are UTC - 6 hours




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: SSD Vulnerability
PostPosted: Sat Jan 01, 2022 2:01 pm 
Offline
Member
Member

Joined: Sat Feb 27, 2010 8:55 pm
Posts: 147
I just encountered this: https://www.tomshardware.com/news/ssd-over-provisioning-vulnerability?utm_medium=social&utm_content=tomsguide&utm_campaign=socialflow&utm_source=facebook.com
Malware can hide in the over-provision area of a SSD.

The proposed fix from the article:
Quote:
The researchers suggest implementing a pseudo-erase algorithm that physically deletes data on an SSD without affecting real-world performance to counter the first attack model.

It is recommended to implement a new monitoring system that can closely watch the over-provisioned size of the SSDs in real-time to counter the second attack model.


If you're writing code for SSDs, this is stuff you'll want to know about!


Top
 Profile  
 
 Post subject: Re: SSD Vulnerability
PostPosted: Sat Jan 01, 2022 2:41 pm 
Offline
Member
Member

Joined: Mon Mar 25, 2013 7:01 pm
Posts: 5099
Is this any different from using HPA and/or DCO to hide data on the drive?

Though the author's suggested fix (monitoring the drive's reported capacity) is a good idea anyway, since it can be used to identify failing drives.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC - 6 hours


Who is online

Users browsing this forum: Google [Bot], SemrushBot [Bot] and 61 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group