3 ms·
1. You have no idea if it's vulnerable or not. For starters, you don't have the source code and nobody you trust has seen it. You would have to take Intel's wor
by bo1024 9y ago
1. You have no idea if it's vulnerable or not. For starters, you don't have the source code and nobody you trust has seen it. You would have to take Intel's word that "disabling" it actually works, and hope that there is no other vulnerability Intel doesn't know about.
2. It doesn't have to be "vulnerable" to be used in an attack; it's essentially designed to be an attack. So any government agency or leaked Intel info may be sufficient to abuse.
3. You can't reliably check/audit if it is being exploited or not since it runs at a higher privilege than any diagnostics you might try to run on your own computer.
Disclaimer: I am not an expert in computer security.