4 ms·
> While the backdoor should require kernel level access to activate, it has been observed to be enabled by default on some systems, allowing any unprivileged co
by sgillen 8y ago
> While the backdoor should require kernel level access to activate, it has been observed to be enabled by default on some systems, allowing any unprivileged code to modify the kernel.
According to the github page README
- deleted 8y ago[deleted]
- close04 8y ago> Hacker discovers how to access his CPU.
- monocasa 8y agoI mean, those systems where it's "enabled by default" are systems where kernel or bios explicitly turned it on. It's a huge problem, and needs to be fixed, but we should use accurate language.
- sgillen 8y agoyes you are right we should be careful with our language here. it is disabled by default in the sense that the OEM would have to enable it in order for the exploit to be effective. However since it appears that sometimes the OEMs have been enabling this feature before shipping from consumers, from the consumer standpoint it would appear to be enabled by default. Just a matter of perspective I guess but yeah it's very important to be clear here.
- umanwizard 8y agoThe point is that this is not an "exploit in x86". If a lot of Linux admins make their root password "12345" and expose their systems to SSH and you log in to their accounts, you haven't found "an exploit in Linux".