4

I'm looking to build a robust system for malware research purposes and this is a requirement so I can absolutely trust that the system is clean on a reformat. Mobo firmware is locked down too of course and I already have a candidate for that but it's really really hard to find one for HDD. Likewise, I will never insert USB devices on this one (rolling full PS/2).

2

It's unlikely there are any HDDs with an embedded controller without firmware upgrade feature, though this upgrade feature need not be documented - the firmware developers will want to have access, too.

But if you are doing reverse engineering, why not use a reverse engineered HDD firmware, and disable the upgrade feature yourself? Of course, you better don't make a mistake in this, because you'll have only one shot ...

And on the subject of mobo firmware: There's plenty of places where there's firmware you won't expect (management engine, embedded controllers, network controllers, wifi controllers, ...) and you'll have to lock all of those down, too...

| improve this answer | |
  • Thank you very much for the answer! I have gone really far on my research and I arrived at the same conclusion, regardless your thoughts did add up to the number of things I had to know about. – Resonce Sep 17 '18 at 6:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.