this post was submitted on 15 Jun 2025
205 points (80.4% liked)

United States | News & Politics

3002 readers
1454 users here now

Welcome to !usa@midwest.social, where you can share and converse about the different things happening all over/about the United States.

If you’re interested in participating, please subscribe.

Rules

Be respectful and civil. No racism/bigotry/hateful speech.

Post anything related to the United States.

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Voroxpete@sh.itjust.works 25 points 1 day ago* (last edited 1 day ago) (1 children)

That's actually extremely plausible.

A smart UPS needs to have access to some very low level functionality on the machine it's connected to in order to safely power it off in the event of a power failure. So you're talking about having at least some root / kernel level access there. It's not crazy to imagine that a malicious driver update could slip in more.

As another poster commented, I'd like to see this actually simulated to be sure, but it's not an idea that I'm willing to dismiss out of hand.

[–] the_crotch@sh.itjust.works 4 points 19 hours ago (1 children)

All they need is the ability to report battery percentage and send an ahci shutdown command to the OS. This is usually handled by an agent running on the machine, otherwise networked ups's would be useless

[–] Voroxpete@sh.itjust.works 1 points 15 hours ago

Yes, but in theory a malicious driver could do more. How much more I'm not exactly certain of, but I'm not going to outright dismiss the idea. Like I said, I'd like to see someone prove it in a lab.