[guardian-dev] Fwd: Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

Nathan of Guardian nathan at guardianproject.info
Mon Jul 29 10:44:06 EDT 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anyone want to talk about basebands?


- -------- Original Message --------
Subject: Re: [tor-dev] how much havoc can a compromised baseband do to a
Guardian ROM device?
Date: Mon, 29 Jul 2013 09:26:43 -0400
From: Nathan Freitas <nathan at freitas.net>
Reply-To: tor-dev at lists.torproject.org
To: tor-dev at lists.torproject.org, Eugen Leitl <eugen at leitl.org>
CC: cypherpunks at al-qaeda.net

On 07/29/2013 09:00 AM, Eugen Leitl wrote:
> Anyone knows whether a Nexus 4 baseband processor has r/w access
> to system memory? The firmware doesn't seem to be loaded at boot,
> so I presume it's entirely out of reach/ reversing?

- From what I know, there has been nothing specific done (yet) in the
Guardian ROM work to combat baseband attacks.

Something interesting about the Nexus 4:
http://www.ifixit.com/Teardown/Nexus+4+Teardown/11781/3

It appears to have two separate "modem" chips, perhaps related to
extended support for LTE:

Qualcomm WTR1605L Seven-Band 4G LTE chip
Qualcomm MDM9215M 4G GSM/UMTS/LTE modem

Searching for either of those parts online reveals a good amount of
documentation, but not many specifics related to Android.

+n
_______________________________________________
tor-dev mailing list
tor-dev at lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=ugpH
-----END PGP SIGNATURE-----


More information about the Guardian-dev mailing list