7 ms·

And how would you test for that?

• lima 9y ago
  Unless you modified your BIOS with a SPI flasher after disassembling your device, you know it's still running :-) It would disappear from the PCI bus. Your commands un-provision AMT (Active Management Technology), the ME feature that apparently has a security issue. Unless you've explicitly enabled AMT, it's not provisioned anyway so this doesn't do anything.
  • weinzierl 9y ago
    > Your commands un-provision AMT (Active Management Technology), the ME feature that apparently has a security issue. It disables the optional OS-side of AMT. How do we know that the vulnerability is in the OS-side? Has this been established yet?
    • agumonkey 9y ago
      May be worth reading the coreboot wiki, I remember reading about the different subsystems of AMT, and it seems plausible that you can set it into a state where control functions are disabled. But my memories are very blurry. Still coreboot guys are quite experts on the matter.
    • lima 9y ago
      Unprovisioning disables both the OS side and the hardware AMT. It doesn't change anything if you never enabled AMT.