News for hackers. Stuff that matters.

A comment on Intel ME: The Way of Static Analysis.

Re:Intel ME: The Way of Static Analysis by moppl on Friday October 13, 2017 @09:33AM (#15465446)
This post seems outdated considering these more recent HN posts:

Disabling Intel ME 11 via undocumented mode (ptsecurity.com) https://news.ycombinator.com/item?id=15116719

How to hack a turned-off computer, or running unsigned code in Intel ME (blackhat.com) https://news.ycombinator.com/item?id=15298833

Personally I am extremely curious about the upcoming blackhat presentation. If it is really true this might be very big.

[ Parent | on HN ]
Re:Intel ME: The Way of Static Analysis by j_s on Friday October 13, 2017 @11:20AM (#15466457)
In addition to those two discussions (Aug 2017, 218 comments) & (Sep 2017, 239 comments), the following came up this week:

Disabling the Intel Management Engine | https://news.ycombinator.com/item?id=15444607 (Oct 2017, 219 comments)

If nothing else, the BlackHat talk has stirred up interest in the Intel ME which had remained in relative obscurity for quite some time.

[ Parent | on HN ]
Re:Intel ME: The Way of Static Analysis by cyphar on Friday October 13, 2017 @10:40AM (#15466083)
Being able to run unsigned code in ME might allow (depending on how the exploit works) for either a replacement of the ME firmware entirely or just doing a disable that exceeds even the HAP bit (and the rest of magic that me_cleaner does to remove different sections of the firmware). But we'll have to wait for the slides, I'm hoping there's something really useful there for the coreboot community.
[ Parent | on HN ]
Re:Intel ME: The Way of Static Analysis by moppl on Friday October 13, 2017 @11:40AM (#15466614)
Well, it might also allow for the ultimate rootkit hack of x86 platforms...
[ Parent | on HN ]
Re:Intel ME: The Way of Static Analysis by craftyguy on Friday October 13, 2017 @11:19AM (#15466449)
Well, it is technically a little outdated. The article OP posted is from April of this year, and the one you linked to was posted in August.
[ Parent | on HN ]