Harm in using Live - CD

Hi all,

after collecting all the inputs on innovative usage of Live CD's here I also started thinking in the alternate direction.

we are collecting all the positive aspects of Live CD.

But how Live CD could be dangerous.

Currently i am looking at the security concerns related to Live Cd's.

I have few idea's in mind which i would like to refine and then present to all.

in the mean time again i am asking my fellow friends to help me with this study too.

Please share your thoughts how live CD could be a security concern.

Are you talking about the security issues with using Live CDs, usability problems with using them, or copyright issues if you distribute them?

I don't think people understand your question.

Quote:

---

Originally Posted by TopDogger

Are you talking about the security issues with using Live CDs, usability problems with using them, or copyright issues if you distribute them?

I don't think people understand your question.

---

Ohk seems like i got carried away and didn't explained it too well...


Currently i am looking at the security concerns related to Live Cd's.

I will update the top post.

i don't see any harm using live CDs except that your settings will just be temporary and will disappear after rebooting. :D so if i just want to try the derivative for awhile, installing it frugally is the best option.

A live CD could theoretically contain a trojan which could bypass all security on unencrypted Unix and Windows partitions. It could steal data or install trojans on those partitions.

Quote:

---

Originally Posted by Will.Spencer

A live CD could theoretically contain a trojan which could bypass all security on unencrypted Unix and Windows partitions. It could steal data or install trojans on those partitions.

---

That is something i was looking for....


care to share how this could be possible.

Quote:

---

Originally Posted by anantshri

That is something i was looking for....
care to share how this could be possible.

---

How could it not be possible? The boot CD would just need drivers to talk to the hard drive and to the selected filesystems (NTFS, EXT4, etc...).

The boot CD could then copy whatever it wanted to the hard drive, including configuring the trojans to be started on the host operating systems at boot time.

Ever used Darik's Boot and Nuke? Imagine an evil version of that? :D

Quote:

---

Originally Posted by Will.Spencer

How could it not be possible? The boot CD would just need drivers to talk to the hard drive and to the selected filesystems (NTFS, EXT4, etc...).

The boot CD could then copy whatever it wanted to the hard drive, including configuring the trojans to be started on the host operating systems at boot time.

Ever used Darik's Boot and Nuke? Imagine an evil version of that? :D

---

Thanks for the explanation will.

Alright now its getting interesting so let me share what i have already thought about on this issue.

Live CD could by itself act as a Trojan or virus.
one case explained by Will

now comes the question how could a seemingly plain looking live cd cause damage.
so lets assume a case.

What i want to do : I want to install ubuntu.

what i will do : I will go to ubuntu.com and download a copy of the latest CD and install it on my PC.
another option is if my bandwidth is low then i can get it from my "friend".

Now what can happen :
1. Suppose the copy provided by friend can contain a simple script inserted inside to execute at specific time informing the owner about the machine as well as providing a back door entry.

2. suppose the copy was downloaded from ubuntu.com -> people tend to believe the source.
But lets assume some is hell bent to change this and consider DNS poisoning in the equation and you can very well understand that exact clone of ubuntu but giving a very different cd image to users.


Besides all this now a days people consider the Live CD's are good for net banking and other sensitive data. they rely so much that the keep forgetting about Man in the Middle attacks.

these are few of my thoughts

lets see what others can comeup with.

and then i will think about ways to prevent it.

You could expand the scope to security issues with all portable media...the only way to be fully secure against potential exploits on them is to disallow use, remove or disable the drive/USB/Firewire ports on the computer...but then that's not very usable is it?

Quote:

---

Originally Posted by javanx3d

You could expand the scope to security issues with all portable media...the only way to be fully secure against potential exploits on them is to disallow use, remove or disable the drive/USB/Firewire ports on the computer...but then that's not very usable is it?

---

No i am not asking everyone to stop using any or very thing.

what i want to say is every coin has two faces.

people in this case only focus on the happy face of live cd's i wanted to collect what could be the bad face of live cd or let it be any live media be it live cd live dvd or live usb.