What are /r/badBIOS's favorite Products & Services?

From 3.5 billion Reddit comments

Insightful comment that Intel hard drives are not on the list:

http://www.reddit.com/r/privacy/comments/2wvblr/how_the_nsas_firmware_hacking_works_and_why_its/coulkao

Discussion at:

https://news.ycombinator.com/item?id=9092210

Okay, that sounds perfectly reasonable to me. I don't think that base insults are useful.

I'm specifically asking because I posted an open letter to BadBiosvictim expressing sincere concern for his mental health. I wanted to make sure that this wasn't considered "inappropriate"; I know that it's not strictly related to the purpose of this subreddit but it seemed like the best place to post it.

Also: What is your opinion on users who copy-and-paste other users' comments to other threads without their permission, specifically against their wishes?

Yeah, what gets me is that they still went ahead with loading uboot from an sd card in their open Novena laptop. Most arm socs have a tiny, immutable brom embedded that can't even fully initialize the ram on its own--it can just find and launch uboot. I wish they had added some raw nand instead. Mainline Linux will soon support raw nand chips. Most work in that regard is I think being done on the sunxi devices like,

https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-MICRO-4GB/open-source-hardware

Thank you /u/sloshnmosh for volunteering to conduct forensics on Flashblu flashdrive #1 and my Asus 1005HA netbook.

Could you please explain or link to a tutorial on how to run Sysinternals Process Monitor in Windows? A tutorial is at http://www.howtogeek.com/school/sysinternals-pro/lesson5/all/

How did you use process monitor tools to highlight all buffer overflows?

Could you please post some screenshots or a snippet of a log if sysinternals process monitor produces a log?

Could redditors who suspect that their USB removable media, including MP3 players and smartphones, are infected follow /u/sloshnmosh's instructions and post findings? Thanks.

Thanks for mentioning there is another boot CD -- Sleuthkit. I never used it because it is command line. Sleuthkit, Helix 2008 CD and HDAT2 CD have disk_stat command preinstalled. I used HDAT2 several times because it is graphical and user friendly. http://www.hdat2.com/ HDAT2 did not detect a HPA.

Isn't the disk_stat command only for HPA? "disk_sreset: This tool will temporarily remove a HPA if one exists. After the disk is reset, the HPA will return. disk_stat: This tool will show if an HPA exists." http://wiki.sleuthkit.org/index.php?title=TSK_Tool_Overview

The list of tools in sleuthkit does not include cloning software.

I will ask /u/sloshnmosh to read your comments and respond since he performed the dd on flashblu and Asus 1005HA netbook.

Thanks for being willing to look at my data. Would you like me to ship one of my micro SD cards that I posted on that active@disk editor dumped? Or do you want me to ask /u/sloshnmosh to ship you flashblu flashdrive and/or Asus 1005HA netbook? I will pay for the shipping. The hard drive cannot be removed as I glued the screws in my Asus netbook to prevent interdiction and implant.

It's good that you have law enforcement background. It's nearly impossible to get the software to practice forensics unless you know someone that will vouch for you. Give me some more time with this and I can get a list and/or screenshots of suspicious processes. What version of Windows are you running? This is a great start! With a new computer-run it as a "thin client" where your machine is only used to process information, and everything is stored on remote servers (cloud infrastructure). He can't get into them unless he has your password. Remember a VERY complex password and change it daily if necessary. You can get a different Dropbox account using another email-completely different email address he wouldn't ever guess or go with a Google account and Google drive. Again, change your absurdly complex password often. Use Anonymous Email service to send important emails without leaving a trail. Don't store anything relevant to this case on your local hard drive. Keep using Dropbox if you do not think it's compromised. More later.

I will buy one.

Mini power strip without surge protector:

www.amazon.com/Cellular-Innovations-MP-3PTO-Portable-Travel/dp/B001GVIU3Q/ref=sr_1_7?ie=UTF8&qid=1423002761&sr=8-7&keywords=mini+power+strip

Mini power strips with surge protector:

www.amazon.com/gp/product/B00EYCEZLA/ref=ox_sc_act_title_1?ie=UTF8&psc=1&smid=ATVPDKIKX0DER

Download:

https://play.google.com/store/apps/details?id=tom.plesko.apps.audio&hl=en

Could others who hear the hum please download the app? Place phone next to ear and take screenshot. Place phone away from you and take a screenshot. Place phone next to a computer speaker and take a screenshot. If you have a second phone, place phone next to its speaker and take a screenshot. Please submit a report. Thanks.