5 ms·
Here you go: Intel Management Engine is a proprietary technology that consists of a microcontroller integrated into the Platform Controller Hub (PCH) microchip
by JohnicBoom 9y ago
Here you go:
Intel Management Engine is a proprietary technology that consists of a microcontroller integrated into the Platform Controller Hub (PCH) microchip with a set of built-in peripherals. The PCH carries almost all communication between the processor and external devices; therefore Intel ME has access to almost all data on the computer, and the ability to execute third-party code allows compromising the platform completely. Researchers have been long interested in such "God mode" capabilities, but recently we have seen a surge of interest in Intel ME. One of the reasons is the transition of this subsystem to a new hardware (x86) and software (modified MINIX as an operating system) architecture. The x86 platform allows researchers to bring to bear all the power of binary code analysis tools.
Unfortunately, this changing did not go without errors. In a subsystem change that will be detailed in the talk of Intel ME version 11+, a vulnerability was found. It allows an attacker of the machine to run unsigned code in PCH on any motherboard via Skylake+. The main system can remain functional, so the user may not even suspect that his or her computer now has malware resistant to reinstalling of the OS and updating BIOS. Running your own code on ME gives unlimited possibilities for researchers, because it allows exploring the system in dynamics.
In our presentation, we will tell how we detected and exploited the vulnerability, and bypassed built-in protection mechanisms.
- komali2 9y agoThis is how the robots win, by social engineering ;P
- JohnicBoom 9y agoI use a VPN whenever I'm not at work, so I know how frustrating it is to be told I didn't pick all the images with a street sign or whatever ridiculous hoop I have to jump through. Especially when I'm only casually interested in the article. Plus, I'm totally fine to help robots out. If they can convincingly post online comments or converse with me, who am I to discriminate?
- andrewstuart2 9y agoRecaptcha is not only frustratingly slow, it's also free image classification for google. Frustrating that every time I sign up for something, I have to do 15 seconds worth of work for a company that doesn't pay me, or at least provide open access to the resulting data.
- greglindahl 9y agoTakes me a minute or two to do a bad job of solving the captcha... eventually it lets me through.
- fenwick67 9y agoI was all on board with doing recaptcha in 2008 when it was digitizing newspapers, and they were pretty simple. But now they take way too long and are just used to train a product for a company I don't like very much.
- danjoc 9y agoI really like the captchas. I regularly answer them incorrectly but "correctly" to F up Google's training. Just doing my small part really.
- dsfyu404ed 9y agoIf enough people don't flag low speed limit signs as signs we'll have faster self driving cars
- nasredin 9y agoIf enough people don't flag large bodies of water... we will have a lot less cars! It really is an environmental thing to do!
- deleted 9y ago[deleted]
- KGIII 9y ago
- deleted 9y ago[deleted]