44 ms·
>>every Intel platform with AMT, ISM, and SBT from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME (Management Engine) n
by jackhack 9y ago
>>every Intel platform with AMT, ISM, and SBT from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME (Management Engine) not CPU firmware.
>>there is literally no Intel box made in the last 9+ years that isn’t at risk
>>SemiAccurate has been begging Intel to fix this issue for literally years
Am I the only one who is so cynical to think it must have been deliberate? Intel dragging their feet for YEARS -- what could justify such a delay? The paranoid side of me asks "Were they waiting to patch this hole, until they found a different one that could be utilized?"
Which begs the next quesion: Where is the NSA in all of this? It's the sort of thing that would be mighty handy to a group wishing to snoop on everyone and everything?
Last question: Why would anyone trust the encrypted management engine after this? (Why would anyone trust it before?)
>> What about embedded devices that are increasingly PC based? Digital signage perhaps? Industrial controls. HVAC. Security systems. Flight controls. Air traffic controls. Medical devices.
What, indeed? Is this the method used to interfere with Iran's nuclear program centrifuges?
- HelloNurse 9y agoExtending the attack surface in the name of alleged convenience seems more a plan to enable hacking than a reasonable design and marketing approach for microprocessors. IoT fanboys with an urge to make home appliances remotely exploitable might be in good faith, but Intel is smarter than them.
- regularfry 9y agoBelieve incompetence before malice, and I'd stick economic incentives somewhere in the middle. The discussion probably went something like: Person 1: "Should we issue a recall and disable a feature which bought us a several billion dollar customer?" Person 2: ...
- sixothree 9y agoIn this day and age the choice between malice and incompetence seems to fall more on the malice side.
- unexistance 9y agoreminds me of CIA's Simple Sabotage Field Manual[0] https://www.cia.gov/news-information/featured-story-archive/2012-featured-story-archive/simple-sabotage.html https://www.cia.gov/news-information/featured-story-archive/...