<story><title>Writing a firmware-only keylogger</title><url>https://8051enthusiast.github.io/2021/07/05/002-wifi_fun.html</url></story><parent_chain><item><author>matheusmoreira</author><text>Just make companies liable for any damage caused by their crappy products. Make them pay billions in damages every time somebody gets hacked because of their negligence. Then they&amp;#x27;ll start caring about the quality of their software instead of treating it as a cost center.</text></item><item><author>gricardo99</author><text>&lt;p&gt;&lt;pre&gt;&lt;code&gt;   The funny thing is that this is effectively a keylogger that does not run any code on the CPU while it is running.
&lt;/code&gt;&lt;/pre&gt;
I already knew it, but this just reinforced how terribly vulnerable pretty much every computer system is.  Makes me think ransomware&amp;#x2F;hacks are going to get a lot worse, and I can’t see how the situation can be improved, at least for quite some time.</text></item></parent_chain><comment><author>joe_the_user</author><text>The implication that software providers should be liable seems to reappear eternally here and remains misguided. Even when we&amp;#x27;re essentially discussing hardware here.&lt;p&gt;Software is the perhaps that area where &amp;quot;good&amp;quot; or &amp;quot;crappy&amp;quot; is most undetermined. A given piece of software can be bullet-proof today and a catastrophic hole can appear tomorrow. And even if the producer releases an update, there&amp;#x27;s no guarantee it will be picked-up.&lt;p&gt;Overall situation is that what&amp;#x27;s needed is standards of software use for those companies which actually do damage. Without standards, your use of &amp;quot;crappy&amp;quot; is meaningless.</text></comment>
<story><title>Writing a firmware-only keylogger</title><url>https://8051enthusiast.github.io/2021/07/05/002-wifi_fun.html</url></story><parent_chain><item><author>matheusmoreira</author><text>Just make companies liable for any damage caused by their crappy products. Make them pay billions in damages every time somebody gets hacked because of their negligence. Then they&amp;#x27;ll start caring about the quality of their software instead of treating it as a cost center.</text></item><item><author>gricardo99</author><text>&lt;p&gt;&lt;pre&gt;&lt;code&gt;   The funny thing is that this is effectively a keylogger that does not run any code on the CPU while it is running.
&lt;/code&gt;&lt;/pre&gt;
I already knew it, but this just reinforced how terribly vulnerable pretty much every computer system is.  Makes me think ransomware&amp;#x2F;hacks are going to get a lot worse, and I can’t see how the situation can be improved, at least for quite some time.</text></item></parent_chain><comment><author>zionic</author><text>Imagine having your cryptocurrency wallet’s private key exfiltrated in this way.&lt;p&gt;Hell, it wouldn’t surprise me if a few less than ethical NSA hackers are doing exactly that in their spare time.</text></comment>