3 ms·
The equivalent of ring -2 privilege. Below the OS or hypervisor level. The intel remote control firmware is a rootkit that lives on many many systems for which
by kevin_b_er 10y ago
The equivalent of ring -2 privilege. Below the OS or hypervisor level.
The intel remote control firmware is a rootkit that lives on many many systems for which the full features and capabilities of, along with all vulnerabilities, are kept as trade secrets.
- tux3 10y agoThat would actually be Ring -3! "Traditionally", Ring -1 is the Hypervisor your kernel is running in, -2 is code running in SMM (e.g. BIOS USB legacy support code), and -3 is the firmware on your physical system (chipsets, hard drive firmware, etc).
- microwavecamera 10y agoYup! http://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20Rootkits.pdf http://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20...