Raspberry Pi As Hardware Backdoor

[wraggster]

NCC Group (http://www.nccgroup.com/) has released a new whitepaper at the Blackhat Europe (http://www.blackhat.com/eu-13/briefings.html#Davis) conference on using a Raspberry PI as a hardware-based backdoor (http://www.nccgroup.com/media/230562/docking_stations_andy_davis_ncc_group_whitepaper.p df) (PDF) in laptop docking stations. From the paper: 'The IT department is typically more concerned about someone stealing your laptop, so they'll ask you to secure your laptop with a Kensington-style lock, but not necessarily to secure the dock. This paper details how attackers can exploit the privileged position that laptop docking stations have within an environment. It will also describe the construction of a remotely controllable, covert hardware implant, but most importantly it will discuss some of the techniques that can be employed to detect such devices and mitigate the risks that they pose.

http://it.slashdot.org/story/13/03/16/0035220/raspberry-pi-as-hardware-backdoor