Anyone knows whether a Nexus 4 baseband processor has r/w access to system memory? The firmware doesn't seem to be loaded at boot, so I presume it's entirely out of reach/ reversing?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 07/29/2013 09:00 AM, Eugen Leitl wrote:
Anyone knows whether a Nexus 4 baseband processor has r/w access to system memory? The firmware doesn't seem to be loaded at boot, so I presume it's entirely out of reach/ reversing?
- From what I know, there has been nothing specific done (yet) in the Guardian ROM work to combat baseband attacks.
Something interesting about the Nexus 4: http://www.ifixit.com/Teardown/Nexus+4+Teardown/11781/3
It appears to have two separate "modem" chips, perhaps related to extended support for LTE:
Qualcomm WTR1605L Seven-Band 4G LTE chip Qualcomm MDM9215M 4G GSM/UMTS/LTE modem
Searching for either of those parts online reveals a good amount of documentation, but not many specifics related to Android.
+n
On Mon, 29 Jul 2013 15:00:05 +0200 Eugen Leitl eugen@leitl.org wrote:
Anyone knows whether a Nexus 4 baseband processor has r/w access to system memory?
How does this relate to tor development?
On 07/29/2013 09:44 AM, Andrew Lewman wrote:
On Mon, 29 Jul 2013 15:00:05 +0200 Eugen Leitl eugen@leitl.org wrote:
Anyone knows whether a Nexus 4 baseband processor has r/w access to system memory?
How does this relate to tor development?
It is a bit of a tangent, but understanding new ways in which Tor running on a smartphone might be compromised could be useful.
Otherwise, happy to have the thread move here: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
+n
On Mon, Jul 29, 2013 at 09:44:52AM -0400, Andrew Lewman wrote:
On Mon, 29 Jul 2013 15:00:05 +0200 Eugen Leitl eugen@leitl.org wrote:
Anyone knows whether a Nexus 4 baseband processor has r/w access to system memory?
How does this relate to tor development?
In that Nexus 4 is the major supported platform for http://shadowdcatconsulting.com/ which comes with Orbot http://shadowdcatconsulting.com/apps/ and I know that tor-dev is read by people with clue, who ought to know the answer to my question and are interested in (semi-)trusted hardware for personal communication.
-
Andrew Lewman -
Eugen Leitl -
Nathan Freitas