schrödinger

feed me, seymour

  • Biohackers encoded malware in a strand of DNA

    https://www.wired.com/story/malware-dna-hack

    a group of researchers from the University of Washington has shown for the first time that it’s possible to encode malicious software into physical strands of DNA, so that when a gene sequencer analyzes it the resulting data becomes a program that corrupts gene-sequencing software and takes control of the underlying computer

    [...]

    “That means when you’re looking at the security of computational biology systems, you’re not only thinking about the network connectivity and the USB drive and the user at the keyboard but also the information stored in the DNA they’re sequencing. It’s about considering a different class of threat.”

    The exploit used is a buffer overflow:

    The result, finally, was a piece of attack software that could survive the translation from physical DNA to the digital format, known as FASTQ, that’s used to store the DNA sequence. And when that FASTQ file is compressed with a common compression program known as fqzcomp—FASTQ files are often compressed because they can stretch to gigabytes of text—it hacks that compression software with its buffer overflow exploit, breaking out of the program and into the memory of the computer running the software to run its own arbitrary commands.

    but,

    the researchers also performed a survey of common DNA sequencing software and found three actual buffer overflow vulnerabilities in common programs. “A lot of this software wasn’t written with security in mind,”

    Not so long ago researchers were also able to encode a short video in a DNS strand.

    https://www.wired.com/story/scientists-upload-a-galloping-horse-gif-into-bacteria-with-crispr

    and here: https://seenthis.net/messages/614723

    #DNA #ADN
    #biohacking #exploit
    #epic_hacker_challenge