Re:Rediscovering the Intel AMT Vulnerability
by nullc on Friday May 05, 2017 @01:46PM
(#14275332)
So has AMD.
[ Parent
| on HN ]
Have you seen their reddit AMA regarding this?
Not the person you were replying to but I would really want to read this, do you have a link?
edit
I think i may have found it, is it this https://www.reddit.com/r/Amd/comments/5x4hxu/we_are_amd_crea...
There still seems to be much confusion about the relationship between PSP and DASH (AMD's version of AMT).
Re:Rediscovering the Intel AMT Vulnerability
by djsumdog on Friday May 05, 2017 @02:20PM
(#14275615)
..and HP servers/sans (iLO)
Re:Rediscovering the Intel AMT Vulnerability
by Godel_unicode on Friday May 05, 2017 @03:52PM
(#14276329)
That's a separate system which lives on a daughter board. It's essentially a kvm+usb cdrom+power switch. No disk access, no dma.
Not the same thing at all.
Edit: and trivially removable if you don't want it.
> No disk access
AMT doesn't provide raw disk access either
> no dma
It's connected to PCI. What makes you so sure that it has no DMA access?
> Not the same thing at all
Indeed - iLo is pretty good, but the implementations provided by other vendors have an even worse track record than AMT does.
I think they even excluded iLO when they locked down firmware updates to paid customers just after https://lkml.org/lkml/2013/11/11/653 (they are the one who ported UEFI to RISC-V too!)