News for hackers. Stuff that matters.

A comment on Game Over We Have Obtained Fully Functional JTAG for Intel CSME via USB DCI. Parent comment

Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by NathanWilliams on Wednesday November 08, 2017 @04:37PM (#15657325)
With physical access to a machine’s USB 3 port, someone could insert running code beneith the operating system, and it wouldn’t know.

You could spy on user activity, sniff encryption keys etc

[ Parent | on HN ]
Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by gpm on Wednesday November 08, 2017 @06:38PM (#15658251)
As well as physical access do you also need to set a bios setting? It isn't entirely clear to me but the background information article linked in this thread seems to suggest yes.
[ Parent | on HN ]
Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by NathanWilliams on Thursday November 09, 2017 @01:25AM (#15660306)
Sorry, I’m not sure, this stuff largely goes over my head. I just understand the basics.

If I had to guess, I wouldn’t be surprised if a different exploit is found that bypasses the bios setting to compliment this one.

[ Parent | on HN ]