Disabling Intel ME 11 via undocumented mode (Positive Technologies)
Disabling Intel ME 11 via undocumented mode (Positive Technologies)
Posted Aug 30, 2017 16:01 UTC (Wed) by mjg59 (subscriber, #23239)In reply to: Disabling Intel ME 11 via undocumented mode (Positive Technologies) by nix
Parent article: Disabling Intel ME 11 via undocumented mode (Positive Technologies)
Posted Aug 30, 2017 19:04 UTC (Wed)
by rahvin (guest, #16953)
[Link]
Which is part of the reason it's such a major security vulnerability. It's unknown and untested code running on a CPU the user has no control over that has DMA access and can override the main CPU. It can copy any data off the system and send it wherever it wants and the only way to block it would be to firewall it externally because the host OS would never see the communication. I understand the Enterprise idea behind these things but the code should be open source and updateable because there is as big of a security vulnerability here than there is in the awful IPMI BMC linux stacks that are out there. One of these days the Blackhats are going to start probing these things and I have no doubt there is going to be vulnerability after vulnerability that's going to allow blackhats to take completely control of connected computers. It will make the Mirari botnet look like childs play.
Disabling Intel ME 11 via undocumented mode (Positive Technologies)