2 ms·
> Technically, from what we know ME firmware is flashable and possible to update And it might be running Minix3[0] which is amazing for me. But man it sucks t
by oneweekwonder 9y ago
> Technically, from what we know ME firmware is flashable and possible to update
And it might be running Minix3[0] which is amazing for me.
But man it sucks to think there is a *nix machine next to my machine I have no control over. Some might mention SSD fw, but does it have a known serial over LAN vulnerability[1].
Wikipedia also cite a elevation of privilege bug[2].
I'm so glad I'm not a IT manager.
[0]: http://blog.ptsecurity.com/2017/04/intel-me-way-of-static-analysis.html http://blog.ptsecurity.com/2017/04/intel-me-way-of-static-an...
[1]: https://www.scmagazineuk.com/platinum-hackers-exploit-intel-amt-sol-for-secure-cc-communications/article/667477/ https://www.scmagazineuk.com/platinum-hackers-exploit-intel-...
[2]: https://en.wikipedia.org/wiki/Intel_Active_Management_Technology#cite_note-intel1-12 https://en.wikipedia.org/wiki/Intel_Active_Management_Techno...
ps. If anybody have some info of the minix in ME. Please drop me a message.