News for hackers. Stuff that matters.

A comment on Intel patches new ME vulnerabilities. Parent comment

Re:Intel patches new ME vulnerabilities by zorkw4rg on Sunday July 22, 2018 @01:03PM (#17587687)
Maybe someone could clarify some things, because I think the impression that I got from reading about this vulnerability is completely wrong. Isn't vPro just something in server hardware? At least the CPU, Mainboard and NIC all need to be certified/from Intel to support this?

You could get the impression that every single computer with a Intel CPU is vulnerable to be hacked over the network. Which I really doubt.

> I want them to disable that thing by default!

When you say this is enabled by default, do you literally mean that they open up a HTTP server without you doing anything?

I don't know much about the Intel ME but the things people are saying about it just seem totally unbelievable.

[ Parent | on HN ]
Re:Intel patches new ME vulnerabilities by woodson on Sunday July 22, 2018 @01:05PM (#17587699)
> Isn't vPro just something in server hardware?

It’s in most business notebooks (HP, Dell, Lenovo, etc.)

[ Parent | on HN ]
Re:Intel patches new ME vulnerabilities by bonzini on Sunday July 22, 2018 @02:24PM (#17588054)
vPro/AMT is the "consumer"/workstation version, the server implementation is based on IPMI, but the ME is present on all systems, even those without vPro at all.
[ Parent | on HN ]
Re:Intel patches new ME vulnerabilities by forapurpose on Sunday July 22, 2018 @04:53PM (#17588872)
vPro is branding for several related products. ME is a platform with its own CPU, memory and OS, on which applications can be run. One common application is AMT, which provides remote management services.
[ Parent | on HN ]