News for hackers. Stuff that matters.

A comment on Game Over We Have Obtained Fully Functional JTAG for Intel CSME via USB DCI. Parent comment

Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by zokier on Wednesday November 08, 2017 @04:51PM (#15657455)
Intels own guidelines say that DCI should be disabled by default, although on some systems that was not true[1], afaik (would like to be corrected if wrong) this does not impact vast majority of systems. This seems more like a frontdoor that is supposed to be locked tight rather than an backdoor. The bugs that actually enable DCI could be more likely candidates to be considered backdoors.

[1] https://security-center.intel.com/advisory.aspx?intelid=INTE...

[ Parent | on HN ]
Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by phkahler on Wednesday November 08, 2017 @08:57PM (#15659129)
But once that front door is open, people will be able to walk around in the house and figure out how to 1) finally disable the thing for good, or 2) find a more universal attack that doesn't use that door.
[ Parent | on HN ]
Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by chx on Wednesday November 08, 2017 @05:36PM (#15657803)
This link is broken.
[ Parent | on HN ]
Re:Game Over We Have Obtained Fully Functional JTAG for Inte... by extra88 on Wednesday November 08, 2017 @06:31PM (#15658200)
They probably removed the languageid parameter, thinking it was optional.

https://security-center.intel.com/advisory.aspx?intelid=INTE...

[ Parent | on HN ]