5 ms·
No, that's not how sources work. You don't get to use your assumption that the article is accurate to assert that it will eventually be proven accurate by othe
by tomku 9y ago
No, that's not how sources work. You don't get to use your assumption that the article is accurate to assert that it will eventually be proven accurate by other sources. That's circular reasoning.
- walterbell 9y agoIf the article's claims are true, all sources (e.g. OEMs with access to a fix) should be under NDA, https://twitter.com/cdemerjian/status/859096565033693185 https://twitter.com/cdemerjian/status/859096565033693185
- tomku 9y ago...and if the article's claims aren't true, there wouldn't be any sources to confirm the claims at all. The evidence we've been presented with so far (no sources) is consistent with both possibilities. When you make a claim as big as SemiAccurate did, it's on you to provide sources to back it up. If you can't present any kind of proof, you don't have a story, you have a rumor.
- walterbell 9y agoThe article claimed: > That is the end of June for non-Intelspeak people, they will officially issue this guidance then along with OEM disclosures. We'll know in two months whether the above claim is true or false.
- tomku 9y agoMy prediction: At the end of June, Intel announces a fix for a minor non-RCE bug in the LAN code of Intel ME. SemiAccurate proudly and inaccurately announces that it confirms their previous reporting and adds it to the list of things to mention every time they write an article about Intel. There is no follow-up Hacker News thread with 100+ comments, so most of the people who posted here continue thinking that there was a major RCE in Intel ME that we just haven't heard about because it was covered up. Edit: Already proven wrong! We're headed for interesting times.
- Natanael_L 9y agohttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr https://security-center.intel.com/advisory.aspx?intelid=INTE... Looks like an almost full confirmation. They're saying consumer hardware is unaffected, but everything else matches.
- tomku 9y agoYeah, I blew that prediction pretty badly. Congrats to SemiAccurate on the huge scoop!
- tchaffee 9y agoThen it's a rumor. One you probably want to keep your eye on. Which was the whole point of the article anyway.
- deleted 9y ago[deleted]
- deleted 9y ago[deleted]
- CodeWriter23 9y agoDevil's Advocate here, so you are assuming there is a perfectly secure software implementation in this world, and only Intel has it for their Management Engine? I get your point, SemiAccurate may or may not have an exploit, but I think it goes without saying there is a security hole somewhere in the ME, it just is not publicly known at this point.