The many years of use of televisions, monitors and projectors have conditioned us to treat them as simple peripherals whose cables only contain video. The VGA cable may have an i2c interface for monitor detection, but otherwise it presents little security risk. An HDMI interface on the other hand can carry an ever-increasing number of ports capable of far more, which means it has made the jump from just a signal cable to a connector full of interesting attack vectors for a mischievous one. Is it time for an HDMI firewall? [King Kévin] thinks so, because he has made a,
This is a surprisingly simple device, as the non-signaling capabilities of HDMI depend on a set of conductors that simply do not connect. This of course also disconnects the on-board EEPROM in the connected device, so to replace it there is an EEPROM on the firewall board that must be programmed with the relevant device information.
HDMI's premise as an attack surface is a valid one, and we're sure there will be attacks that can be made on vulnerable displays that could potentially do naughty things to anything that connects to them. The main value for most readers here probably lies, although in the introduction it gives some going into the HDMI interface, and access to the i2c interface therein.
It's surprising to learn that HDMI is close to 20 years old, so it's no surprise It has a long history of hacking,
0 Comments