“We have obtained fully functional JTAG for Intel CSME via USB DCI”

Re:“We have obtained fully functional JTAG for Intel CSME vi... by tinus_hn on Friday November 10, 2017 @08:59AM (#15669873)

The vulnerability exists, wether someone reveals it to the public or not. These people found it with Intel keeping the working of the system under wraps as much as possible. You can imagine the kind of access available to people who did get to see the source code.

At least now that everyone can see the problem people can make informed decisions.

[ Parent | on HN ]

Re:“We have obtained fully functional JTAG for Intel CSME vi... by goldenkey on Friday November 10, 2017 @11:56AM (#15671152)

I would think those people are under constant threat of being kidnapped for their information

[ Parent | on HN ]

Re:“We have obtained fully functional JTAG for Intel CSME vi... by sametmax on Friday November 10, 2017 @04:17PM (#15673127)

Given the complexity of the thing, they need a LOT of high profile people to create such a stuff. It's very unlikely none of them have been either:

- bribed

- threaten

- felt guilty about it and decided to make amend

My money is that exploits have been on the blacks market for a while now. We just have an official public demo now.

Rule of thumb: when something that catastrophic is made public, the worst already happened and you are late to the party.

[ Parent | on HN ]