News for hackers. Stuff that matters.

A comment on Escalation of Privilege Advisory. Parent comment

Re:Escalation of Privilege Advisory by kevin_b_er on Monday May 01, 2017 @06:06PM (#14242149)
The equivalent of ring -2 privilege. Below the OS or hypervisor level.

The intel remote control firmware is a rootkit that lives on many many systems for which the full features and capabilities of, along with all vulnerabilities, are kept as trade secrets.

[ Parent | on HN ]
Re:Escalation of Privilege Advisory by tux3 on Monday May 01, 2017 @06:39PM (#14242390)
That would actually be Ring -3!

"Traditionally", Ring -1 is the Hypervisor your kernel is running in, -2 is code running in SMM (e.g. BIOS USB legacy support code), and -3 is the firmware on your physical system (chipsets, hard drive firmware, etc).

[ Parent | on HN ]
Re:Escalation of Privilege Advisory by microwavecamera on Monday May 01, 2017 @07:58PM (#14242879)
Yup!

http://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20...

[ Parent | on HN ]