Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on The hijacking flaw that lurked in Intel chips is worse than anyone thought.
1. There's a second bug that allows non-root local users to provision AMT. "An unprivileged local attacker could provision manageability features"[1]
2. Access to AMT allows you to boot a recovery image, mount local drives, and do whatever you like with the included remote KVM.[2][3]
So, even if this is turned off, there are issues to address. If it's on, they have control of the whole machine, remotely. It's as bad as it can get.
[1] https://security-center.intel.com/advisory.aspx?intelid=INTE...
[2] https://software.intel.com/en-us/node/681803
[3] https://software.intel.com/en-us/node/674998
There are no comments on this comment yet.
1. There's a second bug that allows non-root local users to provision AMT. "An unprivileged local attacker could provision manageability features"[1]
2. Access to AMT allows you to boot a recovery image, mount local drives, and do whatever you like with the included remote KVM.[2][3]
So, even if this is turned off, there are issues to address. If it's on, they have control of the whole machine, remotely. It's as bad as it can get.
[1] https://security-center.intel.com/advisory.aspx?intelid=INTE...
[2] https://software.intel.com/en-us/node/681803
[3] https://software.intel.com/en-us/node/674998