Re:Intel platforms from 2008 onwards have a remotely exploit...
by DrPizza on Monday May 01, 2017 @01:30PM
(#14239556)
It isn't on all hardware. Intel has two ME firmwares, a small one for consumer systems, and a big one for corporate/enterprise systems. The small one does not (or at least, should not; is not supposed to) include the remote management features.
In other words, the separation that you describe exists.
Systems with the full firmware sport things such as the vPro branding, and only certain combinations of CPU and chipset support it.
Re:Intel platforms from 2008 onwards have a remotely exploit...
by tomc1985 on Monday May 01, 2017 @01:48PM
(#14239767)
AFAIK the consumer version still kills the system if it's disabled?
Re:Intel platforms from 2008 onwards have a remotely exploit...
by tyingq on Monday May 01, 2017 @06:39PM
(#14242396)
I'd be careful with assumptions on what "consumer hardware" means. There are desktops, NUC units, etc, that shipped with i5 and i7 chips that had vPro.
Re:Intel platforms from 2008 onwards have a remotely exploit...
by DrPizza on Tuesday May 02, 2017 @03:05PM
(#14249538)
Even with the CPU, you also need the right chipset and the right firmware to actually light this stuff up. While especially in the laptop sector there are consumer devices that include this, it's far from universal.
How many corporate IT environments buy off-the-shelf motherboards and CPUs from the same channels as consumers? OEMs get an entirely different set of parts and enterprise sales works in completely different channels. If there is such a clean separation between corporate and consumer markets then why is this hardware on everything, and why does it need to pull power on the machine if it's disabled?