News for hackers. Stuff that matters.

A comment on “We have obtained fully functional JTAG for Intel CSME via USB DCI”. Parent comment

Re:“We have obtained fully functional JTAG for Intel CSME vi... by cyphar on Friday November 10, 2017 @12:32PM (#15671433)
DMA-based attacks are blocked by the IOMMU, which is present in all modern machines (and has been for a few years). Linux has preferential enablement of DMA such that the IOMMU is initialised first, so even plugging in a device in early boot will not be able to exploit DMA.
[ Parent | on HN ]
Re:“We have obtained fully functional JTAG for Intel CSME vi... by TD-Linux on Friday November 10, 2017 @07:46PM (#15674322)
Does it? To use the IOMMU for VFIO, I had to explicitly enable it via a kernel parameter.
[ Parent | on HN ]