Rediscovering the Intel AMT Vulnerability

Re:Rediscovering the Intel AMT Vulnerability by djsumdog on Friday May 05, 2017 @02:20PM (#14275615)

..and HP servers/sans (iLO)

[ Parent | on HN ]

Re:Rediscovering the Intel AMT Vulnerability by Godel_unicode on Friday May 05, 2017 @03:52PM (#14276329)

That's a separate system which lives on a daughter board. It's essentially a kvm+usb cdrom+power switch. No disk access, no dma.

Not the same thing at all.

Edit: and trivially removable if you don't want it.

[ Parent | on HN ]

Re:Rediscovering the Intel AMT Vulnerability by mjg59 on Friday May 05, 2017 @03:58PM (#14276379)

> No disk access

AMT doesn't provide raw disk access either

> no dma

It's connected to PCI. What makes you so sure that it has no DMA access?

> Not the same thing at all

Indeed - iLo is pretty good, but the implementations provided by other vendors have an even worse track record than AMT does.

[ Parent | on HN ]

Re:Rediscovering the Intel AMT Vulnerability by yuhong on Friday May 05, 2017 @09:56PM (#14278250)

I think they even excluded iLO when they locked down firmware updates to paid customers just after https://lkml.org/lkml/2013/11/11/653 (they are the one who ported UEFI to RISC-V too!)

[ Parent | on HN ]

Re:Rediscovering the Intel AMT Vulnerability by dom0 on Friday May 05, 2017 @04:14PM (#14276509)

Well if you want to walk to the DC every time a server throws a tantrum, be my guest.

[ Parent | on HN ]