3 ms·
>Surveillance is for the rest of us. Who has been spied on using Intel ME?
by ksk 9y ago
>Surveillance is for the rest of us.
Who has been spied on using Intel ME?
- AstralStorm 9y agoIt requires some serious web traffic analysis and honeypot to detect the attempt. That is assuming they would use remote access and not use ME locally. That would be even harder to prove once the malware uninstall itself.
- ksk 9y agoYeah, I fully understand that its not easy to detect this. But I'd also like to make an informed decision based on evidence, not speculation. So far I've seen bugs being reported that require the user to enable and provision AMT, which are quite serious, but entirely avoidable by keeping it disabled. Anyway, I'm happy to read more about it if you have any additional info.
- eeZah7Ux 9y agoIn security we work on addressing vulnerabilities, reducing the attack surface, prevention and so on. We don't wait for evidence that a vulnerability is being exploited. This is especially true for cryptography where a cryptosystem used today has to resist theoretical attackers that can use hardware that will exists in decades from now.
- ksk 9y agoSorry, I can't understand what point you're replying to. To me, it sounded like you claimed it was being used for surveillance. I'm happy to go through the evidence if you have any.