3 ms·

OK so the implication being that with this thing found, someone could make a USB device that when plugged into an intel machine immediately gets control?

• deleted 9y ago
  [deleted]
• deleted 9y ago
  [deleted]
• mtnygard 9y ago
  Precisely so. At least for the Intel machines that have IME features. So all the enterprise, data-center boxes but not every laptop. Edit: I read some more. It looks like this is going beyond what I thought and affects way more machines.
• Someone 9y ago
  Reading http://www2.lauterbach.com/pdf/dci_intel_user.pdf http://www2.lauterbach.com/pdf/dci_intel_user.pdf, there are two ways to debug over that connector; one using the USB protocol and the other using a proprietary protocol. If this uses the latter, that device, technically, wouldn’t have to be a USB device (but of course, it could still masquerade as one) That PDF also says your BIOS must support this kind of debugging, and, for the ‘OOB’ protocol, your hardware must support it. So, your BIOS may be configurable to make this attack impossible, and your hardware may already be protected against it.
  • baybal2 9y ago
    Then you simply have to replace the bios with one that has USB debugging enabled. Or change registers on a working machine
    • Someone 9y ago
      ‘Simply’ may mean entering, possibly cracking, the BIOS password (hm, are there BIOSes that use two-factor authentication?). It also means you can’t simply plug in a USB device.
      • baybal2 9y ago
        i mean to resolder the flash chip that holds it