4 ms·
> That is not necessary. Just get the shipping company to redirect the hardware to a facility that flashes the Intel ME with signed malware, reseals it and resh
by privong 11y ago
> That is not necessary. Just get the shipping company to redirect the hardware to a facility that flashes the Intel ME with signed malware, reseals it and reships it without the recipient seeing anything different. That way fewer people need to know about it, which decreases the chance of detection:
@iam-TJ 's point was in reference to the suggestion that Apple could pick the servers up directly from the manufacturer to avoid the interception while the servers are in the shipping company's hands.
- ryao 11y agoIn that case, the attack would not need much cooperation on the part of the OEM/ODM. The Intel chipsets could be flashed enroute to their manufacturing plant. They might not want the malware to go many places other than the intended target, which is why they would likely want some cooperation to ensure that they only make it to the intended target, which is why I say not much cooperation rather than no cooperation. Anyone from Apple inspecting the factory might not realize it.