4 ms·
The difference is, you are no longer limited to functionality normally provided by AMT. Maybe AMT doesn't offer the ability to download arbitrary memory locatio
by qb45 9y ago
The difference is, you are no longer limited to functionality normally provided by AMT. Maybe AMT doesn't offer the ability to download arbitrary memory locations from the running OS and applications, with remote code execution on the ME you could do that. You could modify code running on the CPU on-the-fly and make it read files from disk to memory for downloading too - again, I don't think AMT can read disks, especially when the OS is running and using them concurrently.
- lima 9y agoExactly, AMT is essentially a remote console without any sort of direct access to the running system. You'd have to reboot the system with a remotely recovery media in order to compromise it.
- tyingq 9y agoYou can boot a recovery image though, and edit files on the installed OS that way.
- qb45 9y agoIt just isn't quite as stealthy if you have to power up the box when it's supposed to be off. I mean, not everybody runs Windows 10 and is used to his machine having a free will of its own ;)