How to hack a turned-off computer, or running unsigned code in Intel ME

Re:How to hack a turned-off computer, or running unsigned co... by onikolas on Thursday September 21, 2017 @07:14AM (#15302266)

Let me dial the paranoia up a little by calling your attention to this historic text:

http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thomps...

A quote from the conclusions:

"In demonstrating the possibility of this kind of attack, I picked on the C compiler/ I could have picked on any program-handling program such as an assembler, a loader, or even hardware microcode. As the level of program gets lower, these bugs will be harder and harder to detect. A well-installed microcode bug will be almost impossible to detect."

[ Parent | on HN ]

Re:How to hack a turned-off computer, or running unsigned co... by theWatcher37 on Thursday September 21, 2017 @09:55AM (#15303383)

Once we get to the point where machine learning can develop and deploy exploits/low-level bugs like these will become very interesting, and likely weapons of nation states.

[ Parent | on HN ]

Re:How to hack a turned-off computer, or running unsigned co... by Relys on Thursday September 21, 2017 @05:13PM (#15307403)

I'm pretty sure that was the entire point of the DARPA Cyber Grand Challenge. XD

[ Parent | on HN ]

Re:How to hack a turned-off computer, or running unsigned co... by brian_herman on Friday September 22, 2017 @12:09AM (#15309336)

http://archive.darpa.mil/cybergrandchallenge/

[ Parent | on HN ]