Joseph Crivello [[email protected]] wrote: > If someone successfully attacks the firmware on any of your network cards, > you are screwed no matter what. Any modern network card is going to have the > ability to issue DMAs and can easily root your entire system.
If you are running OpenBSD or Bitrig and you have VT-d enabled, someone is working on bringing iommu functionality to both OSes right now. This can prevent runaway DMA. Kinda cool, ya know!

