3 ms·
It's going to be interesting to see what the ramifications are this for trusted execution environments, where people are validating the hardware they are runnin
by Rantenki 11y ago
It's going to be interesting to see what the ramifications are this for trusted execution environments, where people are validating the hardware they are running on via tboot.
It's fortunate that newer platforms seem to be immune (see https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00045&languageid=en-fr https://security-center.intel.com/advisory.aspx?intelid=INTE... ), but remediation after exploit via total hardware replacement would _suck_ for anybody with servers just a couple of years old.
- strstr 11y agoTXT's interactions with SMM are pretty broken [1]. For example, TXT doesn't (can't) validate SMRAM. This exploit still requires ring 0, which, hopefully, the code running in TXT doesn't give access too willy nilly. [1] http://invisiblethingslab.com/resources/bh09dc/Attacking%20Intel%20TXT%20-%20paper.pdf http://invisiblethingslab.com/resources/bh09dc/Attacking%20I...