4 ms·
I don't think it's just that the flaw exists, which alone is pretty bad, but how widely deployed it is in large enterprise, coupled with Intel ignoring it after
by DKnoll 9y ago
I don't think it's just that the flaw exists, which alone is pretty bad, but how widely deployed it is in large enterprise, coupled with Intel ignoring it after being given years of notice and also the unease about AMT in the OSS community since it's deployment. To be honest, I doubt 9/10 people who care about this are going to stop using Intel, but it's still a comedy of errors and I think everyone loves a spectacle.
- lima 9y ago> Intel ignoring it after being given years of notice Sure about that? From what I can tell, it's a recently discovered vulnerability that was promptly fixed.
- DKnoll 9y agoAccording to SemiAccurate (terrible name for a source) they reported it to Intel some time ago.
- lima 9y agoAs far as I know, Embedi and not SemiAccurate found and reported the issue. https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf https://www.embedi.com/files/white-papers/Silent-Bob-is-Sile... > An authentication bypass vulnerability, which will be later known as CVE-2017-5689, was originally discovered in mid-February of 2017 while doing side-research on the internals of Intel ME firmware. The first objects of interest were network services and protocols.