Re:Potential impact of the Intel ME vulnerability
by cm2187 on Tuesday November 28, 2017 @03:33AM
(#15795404)
But isn’t the concern about Intel ME mostly on servers which pretty much all have it and aren’t behind firewalls? This surely wouldn’t show on a remote desktop session?
[ Parent
| on HN ]
Re:Potential impact of the Intel ME vulnerability
by dijit on Tuesday November 28, 2017 @06:56AM
(#15796392)
FD: I am an Infrastructure Guy.
Honestly I care a lot less about ME on servers because at the end of the day, if I see a server misbehaving (sending packets on the wire where it shouldn't) that's going to be a big red flag. Not to mention, egress traffic is indeed filtered. Could they compromise how my applications run? probably. Is there a need to do that? Maybe. Would I see it? certainly.
the concern of ME is for my laptop which many wifi access points have "direct" line access to, it stores all the secrets of my server environment, and even if encrypted a persistent backdoor in ring -1 of my CPU is going to compromise those thousands of servers and in exactly the way I can't defend against.
Re:Potential impact of the Intel ME vulnerability
by michaelbuckbee on Tuesday November 28, 2017 @10:19AM
(#15797992)
I worry about egress routes like https://www.christophertruncer.com/exfiltrate-data-via-dns-w...
It's hard to keep up with the cleverness of attackers.
Re:Potential impact of the Intel ME vulnerability
by vog on Tuesday November 28, 2017 @07:44AM
(#15796686)
Maybe you could unite with other infrastructure people to speak up?
Re:Potential impact of the Intel ME vulnerability
by Asiasweatworker on Tuesday November 28, 2017 @07:37AM
(#15796642)
server ME does not connect to ethernet but BMC do. They may enable something like Secure Boot which requires signing to prevent 3party unauthorized backdoors.