“We have obtained fully functional JTAG for Intel CSME via USB DCI”

Re:“We have obtained fully functional JTAG for Intel CSME vi... by goldenkey on Friday November 10, 2017 @11:58AM (#15671171)

DMA/Firewire over USB makes pretty much every systen vulnerable to USB attacks (ME aside.)

[ Parent | on HN ]

Re:“We have obtained fully functional JTAG for Intel CSME vi... by cyphar on Friday November 10, 2017 @12:32PM (#15671433)

DMA-based attacks are blocked by the IOMMU, which is present in all modern machines (and has been for a few years). Linux has preferential enablement of DMA such that the IOMMU is initialised first, so even plugging in a device in early boot will not be able to exploit DMA.

[ Parent | on HN ]

Re:“We have obtained fully functional JTAG for Intel CSME vi... by TD-Linux on Friday November 10, 2017 @07:46PM (#15674322)

Does it? To use the IOMMU for VFIO, I had to explicitly enable it via a kernel parameter.

[ Parent | on HN ]