2 ms·
> Intel ignoring it after being given years of notice Sure about that? From what I can tell, it's a recently discovered vulnerability that was promptly fixed.
by lima 10y ago
> Intel ignoring it after being given years of notice
Sure about that? From what I can tell, it's a recently discovered vulnerability that was promptly fixed.
- DKnoll 10y agoAccording to SemiAccurate (terrible name for a source) they reported it to Intel some time ago.
- lima 10y agoAs far as I know, Embedi and not SemiAccurate found and reported the issue. https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf https://www.embedi.com/files/white-papers/Silent-Bob-is-Sile... > An authentication bypass vulnerability, which will be later known as CVE-2017-5689, was originally discovered in mid-February of 2017 while doing side-research on the internals of Intel ME firmware. The first objects of interest were network services and protocols.