News for hackers. Stuff that matters.

A comment on The hijacking flaw that lurked in Intel chips is worse than anyone thought. Parent comment

Re:The hijacking flaw that lurked in Intel chips is worse th... by qb45 on Sunday May 07, 2017 @03:57AM (#14284382)
The difference is, you are no longer limited to functionality normally provided by AMT. Maybe AMT doesn't offer the ability to download arbitrary memory locations from the running OS and applications, with remote code execution on the ME you could do that. You could modify code running on the CPU on-the-fly and make it read files from disk to memory for downloading too - again, I don't think AMT can read disks, especially when the OS is running and using them concurrently.
[ Parent | on HN ]
Re:The hijacking flaw that lurked in Intel chips is worse th... by lima on Sunday May 07, 2017 @06:52AM (#14284839)
Exactly, AMT is essentially a remote console without any sort of direct access to the running system. You'd have to reboot the system with a remotely recovery media in order to compromise it.
[ Parent | on HN ]
Re:The hijacking flaw that lurked in Intel chips is worse th... by tyingq on Sunday May 07, 2017 @10:21AM (#14285583)
You can boot a recovery image though, and edit files on the installed OS that way.
[ Parent | on HN ]
Re:The hijacking flaw that lurked in Intel chips is worse th... by qb45 on Sunday May 07, 2017 @11:12AM (#14285819)
It just isn't quite as stealthy if you have to power up the box when it's supposed to be off.

I mean, not everybody runs Windows 10 and is used to his machine having a free will of its own ;)

[ Parent | on HN ]