Intel patches new ME vulnerabilities

Re:Intel patches new ME vulnerabilities by ksec on Sunday July 22, 2018 @10:22AM (#17586895)

>Perhaps the only consolation is that for CVE-2018-3628, Intel says that exploitation is possible only from the same subnet.

That is at least a little more comforting.

[ Parent | on HN ]

Re:Intel patches new ME vulnerabilities by zzzcpan on Sunday July 22, 2018 @10:53AM (#17587044)

Javascript in your browser is running in the same subnet.

[ Parent | on HN ]

Re:Intel patches new ME vulnerabilities by ams6110 on Sunday July 22, 2018 @02:13PM (#17587998)

I understand the temptation, but you really shouldn't trust even your own internal subnets if you really care about security.

[ Parent | on HN ]

Re:Intel patches new ME vulnerabilities by norcalli on Monday July 23, 2018 @11:44AM (#17593513)

But if I managed to compromise a single machine on your subnet, then that means all Intel machines I can touch are also vulnerable, no?

[ Parent | on HN ]