/tech/ - Technology★

>>916592

>when the GPU rootkit detects you are running wireshark in a VM and responds by installing its own hidden networking drivers, uses your wifi card to mimic the highest signal hotspot, autoconnects, and proceeds to infect all machines on your network

>>916740

Who are you quoting?

Also, just have wireshark on an AP the suspect computer connects to.

>>916436 (OP)

I think it would be interesting to get some sort of device which could detect radio sources nearby. That way if there was some sort of hardware phoning home you could detect it.

>>916534

What if your oscilloscope is compromised?

What if the processor has different stuff in its cache?

What if the processor's branch predictor starts in a different state?

What if the operating system is doing things in the background?

What if it only does malicious stuff in a time which aligns with when you would be asleep?

There are a lot of flaws to this approach.

>>917000

Despite the digits, you don't really know how logic circuitry works. You are checking inputs and outputs, not what is happening in the CPU itself.

Anon already addressed

>What if your oscilloscope is compromised?

>>916534

> Doing literally anything else is suspect, including the osciliscope itself if you don't protect it properly

>>917006

>You are checking inputs and outputs

I assume you would actually be measuring the power consumption. If you are just comparing the output of an operation, why use an oscilloscope at all?

>not what is happening in the CPU itself

It is going to change the duration of the calculation and change what instructions are being processed. This will effect the waveform he is asking us to compare.