3 ms·
False. ME by itself does not do any remote communication whatsoever. Zero external attack surface. Different story for vPro, but you can disable it. It's a gre
by lima 9y ago
False. ME by itself does not do any remote communication whatsoever. Zero external attack surface. Different story for vPro, but you can disable it.
It's a great place, however, to gain persistence after an initial compromise as the talk shows.
- sounds 9y agoDo you have proof that the ME does not do any remote communication and has zero attack surface? Be sure to include "internal" attack surfaces that may be accessible from malware in ring 0.
- lima 9y agoI was talking about the external attack surface, and there's absolutely no indication that ME has any such attack surface as far as software vulnerabilities go. They could have built a deliberate backdoor into the network code, but that's highly unlikely. It obviously has a lot of internal attack surface, which is bad enough.