News for hackers. Stuff that matters.

A comment on “We have obtained fully functional JTAG for Intel CSME via USB DCI”. Parent comment

Re:“We have obtained fully functional JTAG for Intel CSME vi... by cyphar on Friday November 10, 2017 @10:10AM (#15670329)
This was a problem even before Intel ME. Modern server motherboards (and several workstations) have a second Linux installation on your motherboard (known as a "baseboard management controller" or BMC) that cannot be removed. There have been many exploits found in the software running on BMCs, and if you want to "clean up" an infected server then you have to throw out the hardware if you want to be 100% certain.
[ Parent | on HN ]
Re:“We have obtained fully functional JTAG for Intel CSME vi... by shenki0 on Friday November 10, 2017 @10:37PM (#15674872)
The bmc situation is changing. There's an effort to support the ARM SoCs upstream, and there are a number of companies working on open source BMC stacks.

https://github.com/openbmc

[ Parent | on HN ]